CVE-2024-10721

A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affected page. The issue occurs in the circuits...

PT-2025-12058

Name of the Vulnerable Software and Affected Versions phpipam/phpipam version 1.5.2 Description A stored cross-site scripting XSS vulnerability was discovered in the circuits options page, specifically at the endpoint https://demo.phpipam.net/tools/circuits/options/. This issue allows an attacker...

CVE-2024-10721: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability was discovered in phpipam/phpipam version 1.5.2. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed in the context of other users who view the affected page. The issue occurs in the circuits...