CVE-2024-10724: Stored XSS in IPV6 Section in phpipam/phpipam
Published Mar 20, 2025
·Updated
A stored cross-site scripting (XSS) vulnerability exists in phpipam/phpipam version 1.5.2, specifically in the Subnet NAT translations section when editing the Destination address. This vulnerability allows an attacker to execute malicious code. The issue is fixed in version 1.7.0.
Affected Software
2 affected components
Phpipam Phpipam
Phpipam Phpipam<1.7.0
Remediation
Event History
Mar 20, 2025
CVE Published
via MITRE·10:09 AM
Data Sourced
via MITRE·10:09 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-10724?
CVE-2024-10724 is classified as a stored cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2024-10724?
To fix CVE-2024-10724, upgrade to phpipam version 1.7.0 or later.
3
In which section of phpipam is CVE-2024-10724 found?
CVE-2024-10724 is found in the Subnet NAT translations section when editing the Destination address.
4
What versions of phpipam are affected by CVE-2024-10724?
CVE-2024-10724 affects phpipam version 1.5.2.
5
Can CVE-2024-10724 be exploited remotely?
Yes, CVE-2024-10724 can be exploited remotely to execute malicious code.