CVE-2019-15227

FlightPath 4.8.3 is affected by a cross-site scripting (XSS) flaw in the Admin Console (Content, Edit urgent message, and Users sections). The vulnerability could lead to cookie stealing and other malicious actions. Supported documents confirm the issue across multiple feeds (NVD, Red Hat advisor...

CVE-2019-13396

FlightPath is affected by CVE-2019-13396: versions prior to 4.8.2 and 5.0-rc2 contain a Local File Inclusion vulnerability caused by include_once in system_handle_form_submit, enabling directory traversal via the form_include parameter in index.php?q=system-handle-form-submit. Impact cited includ...

CVE-2024-50983

FlightPath version 7.5 is susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows authenticated remote attackers with administrative rights to inject arbitrary JavaScript into a user's web browser. The attack vector involves including a malicious payload within the Last Name s...