CVE-2024-10725
CVSS 3.0 Score 3.5 of 10 (low)
Details
Published Mar 20, 2025
CWE ID 79
Summary
CVE-2024-10725 is a stored cross-site scripting (XSS) vulnerability affecting phpipam version 1.5.2. This issue enables attackers to inject malicious scripts into the application that are executed in other users' contexts when viewing affected pages. The vulnerability arises due to insufficient sanitization of user input when editing NAT destination addresses. Consequences of this flaw can include data theft, account compromise, and other malicious activities. The vulnerability is resolved in version 1.7.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.