CVE-2017-6397

FlightAirMap v1.0-beta.10 is affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient filtration of user-supplied data in several *-sub-menu.php pages. The issue allows an attacker to inject arbitrary HTML/JavaScript in the context of the vulnerable website. Connected s...