Description
Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTML via the instructions parameter for the /app/admin/instructions/edit-result.php endpoint.
Medium · 6.1
CVE-2025-61078
EUVD-2025-202256GHSA-g6m5-w2xw-rhqw
Cross-site scripting (XSS) vulnerability in Request IP form in phpIPAM v1.7.3 allows remote attackers to inject arbitrary web script or HTM…
Published Dec 9, 2025 · Updated Jul 5, 2026 · Assigned by mitre