PT-2025-12063

Name of the Vulnerable Software and Affected Versions phpipam/phpipam versions 1.5.0 through 1.6.0 Description A reflected cross-site scripting XSS issue exists, arising when the application receives data in an HTTP request and includes that data within the immediate response in an unsafe manner...

CVE-2024-41358: Improper Neutralization of Input During Web Page Generation

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\import-export\import-load-data.php...

CVE-2024-41353

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\groups\edit-group.php...

CVE-2024-41356: Improper Neutralization of Input During Web Page Generation

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...

CVE-2024-41356

phpipam 1.6 is vulnerable to Cross Site Scripting XSS via app\admin\firewall-zones\zones-edit-network.php...