CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings

published January 19, 2022

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Published
2022-01-19T20:38Z
EPSS history
Timeline
  • 19 JAN 20:38Z
    PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings
    cvelistv5