Not rated
CVE-2022-23045 PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter…
Description
PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PhpIPAM | 1.4.4 | No fix stated |
Other CVEs of PhpIPAM
The 6 CVEs of PhpIPAM →
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3
5.3
Medium
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3
4.8
Medium
CVE-2026-4189
A weakness has been identified in phpipam up to 1.7.4
5.1
Medium
CVE-2023-4965
A vulnerability was found in phpipam 1.5.1
2.7
Low