phpipam Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in phpipam/phpipam version 1.5.2. This issue allows attackers to inject malicious scripts into the destination address field of the NAT tool. These scripts can be executed when a user interacts with the field. The vulnerability could lead to the theft of user cookies, unauthorized access to user accounts, and redirection to malicious websites. This issue has been resolved in version 1.7.0.

Impact

Exploitation of this vulnerability could result in stored cross-site scripting, allowing injected scripts to be executed in the context of the user.

Remediation

Users can upgrade to phpipam version 1.7.0 to address this vulnerability.