CVE-2018-1000642 | BDVDB-2026-106002 Detail

Description#

FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Ysurac/FlightAirMap/issues/410
https://0dd.zone/2018/08/05/FlightAirMap-Reflected-XSS/

Exploit#

No public exploit known

History#

Version 12018-08-20Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.