Phpipam · Phpipam · CVE-2020-13225
**Name of the Vulnerable Software and Affected Versions**
phpIPAM version 1.4
**Description**
The issue is related to a stored cross site scripting (XSS) vulnerability. This vulnerability is located within the Edit User Instructions field of the User Instructions widget.
**Recommendations**
For phpIPAM version 1.4, as a temporary workaround, consider disabling the Edit User Instructions field in the User Instructions widget until a patch is available. Restrict access to this field to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.