Volerion logoVolerion
Volerion logoVolerion

phpipam Stored Cross-Site Scripting Vulnerability in Subnet NAT Translations

Vulnerability

A stored cross-site scripting vulnerability has been identified in phpipam version 1.5.2. The issue arises in the Subnet NAT translations section when editing the Destination address. This vulnerability allows attackers to execute malicious scripts.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.

Reproduction

The vulnerability can be reproduced by editing the Destination address in the Subnet NAT translations section of phpipam version 1.5.2. The application will execute any injected scripts, demonstrating the cross-site scripting vulnerability.

Remediation

Users can upgrade to phpipam version 1.7.0 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
1.7
exploitability
6.3
remediation
7.7
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.