Description app/sections/user-menu.php in phpIPAM before 1.3.1 has XSS via the ip parameter. References https://github.com/phpipam/phpipam/releases/tag/1.3.1 https://github.com/phpipam/phpipam/issues/1521