CVE-2018-16142: Phpok

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/login_control.php via the _back parameter to the ok_f function.

Affected products

• Phpok Phpok: version 4.8.278 only

Published 2018-08-30. Last modified 2026-06-17.