CVE-2024-10727CWE-79

Cross-Site Scripting (XSS) in phpipam/phpipam

Low · published March 20, 2025

CVSS v3.0
3.5
EPSS
0%
Percentile
27.8
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability exists in phpipam/phpipam versions 1.5.0 through 1.6.0. The vulnerability arises when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner. This allows an attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to full compromise of the user.

The record
Technical detail
CVSS v3.0
3.5 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-20T10:10Z
EPSS history
Timeline
  • 20 MAR 10:10Z
    Cross-Site Scripting (XSS) in phpipam/phpipam
    cvelistv5