CVE-2024-38953: XSS
Published Jul 1, 2024
·Updated
phpok 6.4.003 contains a Cross Site Scripting (XSS) vulnerability in the okf() method under the framework/api/uploadcontrol.php file.
Affected Software
1 affected component
PhpOK PhpOK=6.4.003
Event History
Jul 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-38953?
CVE-2024-38953 is classified as a Cross Site Scripting (XSS) vulnerability, which can allow attackers to execute scripts in the context of a user's browser.
2
How do I fix CVE-2024-38953?
To fix CVE-2024-38953, update phpok to the latest version that has addressed this XSS vulnerability.
3
Which versions of phpok are affected by CVE-2024-38953?
CVE-2024-38953 specifically affects phpok version 6.4.003.
4
What are the potential impacts of CVE-2024-38953 exploitation?
Exploitation of CVE-2024-38953 may lead to unauthorized actions performed on behalf of users, data theft, or malicious content delivery.
5
How can I identify if my system is vulnerable to CVE-2024-38953?
You can identify if your system is vulnerable to CVE-2024-38953 by checking if you are using phpok version 6.4.003 or lower.