CVE-2022-23045

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site setti...

Original description

The description as published by the source.

PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the "Site title" parameter while updating the site settings. The "Site title" setting is injected in several locations which triggers the XSS.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory fluidattacks.com
advisory github.com
advisory nvd.nist.gov
web github.com