CVE-2024-41355

The phpIPAM IP address management application version 1.6 is vulnerable to Cross-Site Scripting (XSS) via the /app/tools/request-ip/index.php endpoint. The root cause is the lack of sufficient measures to protect the website structure, which allows a remote attacker to conduct XSS attacks. As a t...