CVE 2023-24657

phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.

See the CVE page on Mitre.org for more details.