CVE-2024-41348 - openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

MEDIUM

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

Published Aug 29, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.38%

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
5234b5b	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/jpatokal/openflights/commit/d815df727a94fe98d3299873f0efddf6a81a56a3
https://github.com/jpatokal/openflights/commit/e7f5d8112d5353cc1ceb6ae92aa5ff2f3c2e35a6
https://github.com/jpatokal/openflights/issues/1478		ExploitIssue Tracking