CVE-2024-41357

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• phpIPAM 1.6 - Reflected-Cross-Site Scripting (XSS)2025-12-02 · webapps · php

Impact

phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via /app/admin/powerDNS/record-edit.php.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2024-41357.md
• https://github.com/phpipam/phpipam/issues/4149
• https://github.com/phpipam/phpipam/issues/4149