CVE-2020-24857

IXP Manager v5.6.0 contains a Cross Site Scripting vulnerability in the looking glass component that could lead to arbitrary code execution. Root cause is a reflected/stored XSS vector reported across multiple sources; exploitability details are not fully specified in the provided documents. A pa...

CVE-2022-4559

INEX IPX-Manager (versions up to 6.2.0) contains a cross-site scripting vulnerability in the file resources/views/customer/list.foil.php. Exploitation is possible remotely and could impact users who visit affected pages. The issue is mitigated by upgrading to version 6.3.0, with the patch hash bc...

CVE-2023-36666

CVE-2023-36666 affects INEX IXP-Manager prior to 6.3.1, where a cross-site scripting (XSS) vulnerability is exposed in multiple Foil PHP pages (list-preamble.foil.php, page-header-preamble.foil.php, edit-form.foil.php, overview.foil.php, cust.foil.php, view.foil.php). The underlying issue is an i...