Flightairmap

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1000642 MEDIUM This Month

FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Flightairmap

NVD GitHub

CVSS 3.0

6.1

EPSS

0.9%

CVE-2017-6397 MEDIUM POC This Month

An issue was discovered in FlightAirMap v1.0-beta.10. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Flightairmap

NVD GitHub

CVSS 3.1

6.1

EPSS

0.2%

CVE-2018-1000642

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Flightairmap

NVD GitHub

CVE-2017-6397

EPSS 0% CVSS 6.1

MEDIUM POC This Month

XSS PHP Flightairmap

NVD GitHub