CVE-2024-41358
phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import-load-data.php.
- Affected products
- Phpipam
- Phpipam
- = 1.6
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 1.6% (74th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2024-08-29
CVE-2024-41358 at NVD
2 known exploits for CVE-2024-41358
Proof-of-concept code and exploit modules indexed by Sploitus