Cross Site Scripting Vulnerability in phpipam 1.6 by phpipam
CVE-2024-41355

Currently unrated

Key Information:

Vendor

phpipam

Status
phpipam
Vendor
CVE Published:
26 July 2024

What is CVE-2024-41355?

phpipam version 1.6 is subject to a Cross Site Scripting (XSS) vulnerability located in the request IP tool at /app/tools/request-ip/index.php. This flaw can potentially allow attackers to inject malicious scripts into webpages viewed by other users, compromising sensitive information and user sessions. It is essential for administrators and users of phpipam to apply necessary security measures to mitigate potential exploitation of this vulnerability.

References

https://github.com/phpipam/phpipam/issues/4151

Timeline

  • Vulnerability published

.