CVE-2024-10724CWE-79

Stored XSS in IPV6 Section in phpipam/phpipam

Low · published March 20, 2025

CVSS v3.0
3.5
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-20T10:09Z
EPSS history
Timeline
  • 20 MAR 10:09Z
    Stored XSS in IPV6 Section in phpipam/phpipam
    cvelistv5