CVE-2019-15227

FlightPath 4.8.3 is affected by a cross-site scripting (XSS) flaw in the Admin Console (Content, Edit urgent message, and Users sections). The vulnerability could lead to cookie stealing and other malicious actions. Supported documents confirm the issue across multiple feeds (NVD, Red Hat advisor...

CVE-2019-13396

FlightPath is affected by CVE-2019-13396: versions prior to 4.8.2 and 5.0-rc2 contain a Local File Inclusion vulnerability caused by include_once in system_handle_form_submit, enabling directory traversal via the form_include parameter in index.php?q=system-handle-form-submit. Impact cited includ...