CVE-2024-41353 - phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php

HIGH

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php

Published Jul 26, 2024

7.1

HIGH

CVSS 3.1

EPSS 0.34%

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\groups\edit-group.php

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Phpipam	Phpipam	unknown	Affected 1.6

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-39021		Advisory
https://github.com/phpipam/phpipam/issues/4147		ExploitIssue TrackingVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 26, 2024

Updated Aug 2, 2024

Reserved Jul 18, 2024

CISA Vulnrichment

Updated Jul 29, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 26, 2024

Updated Aug 2, 2024

GitHub

No data