CVE-2024-10722

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-10722

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10722.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-10722

Published

2025-03-20T10:10:29.411Z

Modified

2026-07-08T06:41:38.910936665Z

Severity

3.5 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N CVSS Calculator

Summary

Stored Cross-site Scripting (XSS) in phpipam/phpipam

Details

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2. The vulnerability allows attackers to inject malicious scripts into the 'Description' field of custom fields in the 'IP RELATED MANAGEMENT' section. This can lead to data theft, account compromise, distribution of malware, website defacement, content manipulation, and phishing attacks. The issue is fixed in version 1.7.0.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/10xxx/CVE-2024-10722.json",
    "cna_assigner": "@huntr_ai",
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Git / github.com/phpipam/phpipam

Affected ranges

Type

GIT

Repo

https://github.com/phpipam/phpipam

Events

Introduced

Fixed

3271d956a581a00a7d4080426d5ca8f2c4b06102

Fixed

c1697bb6c4e4a6403d69c0868e1eb1040f98b731

Database specific

{
    "cpe": "cpe:2.3:a:phpipam:phpipam:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.7.0"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

v1.*

v1.16.003

v1.19.008

v1.2.0_beta2

v1.3.0

v1.3.2

v1.5.0

v1.6.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-10722.json"