Non notée
CVE-2022-23045 PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter…
Description
PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| PhpIPAM | 1.4.4 | Pas de correctif indiqué |
Autres CVE de PhpIPAM
Les 6 CVE de PhpIPAM →
CVE-2026-115982
A vulnerability was detected in phpIPAM up to 1.8.3
5.3
Moyenne
CVE-2026-115981
A security vulnerability has been detected in phpIPAM up to 1.8.3
4.8
Moyenne
CVE-2026-4189
A weakness has been identified in phpipam up to 1.7.4
5.1
Moyenne
CVE-2023-4965
A vulnerability was found in phpipam 1.5.1
2.7
Faible