PHP session.use_only_cookies Is Disabled is a vulnerability similar to Code Evaluation (PHP) and is reported with medium-level severity. It is categorized as OWASP 2017-A6, OWASP 2013-A5, CWE-598, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N. Read on to