CVE-2017-15640: Phpipam

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter.

Affected products

• Phpipam Phpipam: before 1.3.1 (fixed in 1.3.1)

Published 2018-04-21. Last modified 2026-06-17.