Reflected Cross-Site Scripting Vulnerability in phpipam from phpipam
CVE-2024-10727
6.1MEDIUM
What is CVE-2024-10727?
A reflected cross-site scripting (XSS) vulnerability exists in phpipam versions 1.5.0 through 1.6.0, which enables attackers to inject malicious JavaScript code. When the application processes HTTP requests, it improperly includes the input data in responses without sufficient sanitization. As a result, this flaw can be exploited to execute unauthorized JavaScript in a user's browser, significantly compromising their security and privacy.
Affected Version(s)
phpipam/phpipam < 1.7.0
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
CVSS V3.0
Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved