CVE-2024-10724

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p27

Published

Mar 20, 2025 (Mar 20, 2025)

Modified

Jun 17, 2026

Description

A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0.

Vendors: phpipam
Products: phpipam
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.