CVE-2024-10727
Cross-Site Scripting (XSS) in phpipam/phpipam
- State
- Published
- Severity
- 3.5 Low
- Published
- Mar 20, 2025
- Updated
- Mar 20, 2025
- Reserved
- Nov 1, 2024
Description
A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 3.5 Low | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N | @huntr_ai |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected Products
| Product | Versions |
|---|---|
phpipam/phpipamphpipam |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.