Vulnerabilities

TI-2024-27595 CVE-2024-41348 · GHSA-cmm9-5j5g-mhq5

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

MEDIUM 60

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00381 Published 2024-08-29 No fix listed CWE-79

TI-2024-27594 CVE-2024-41347 · GHSA-m2m3-8mcw-w486

MEDIUM 60

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00295 Published 2024-08-29 No fix listed CWE-79

TI-2024-27593 CVE-2024-41346 · GHSA-r75v-8c97-7xvm

MEDIUM 60

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/submit.php

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00279 Published 2024-08-29 No fix listed CWE-79

TI-2024-27592 CVE-2024-41345 · GHSA-xgcx-934j-84hv

MEDIUM 60

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/trip.php

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00279 Published 2024-08-29 No fix listed CWE-79