Vulnerability Details CVE-2019-15227
FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 52.6%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2019-15227
-
cpe:2.3:a:getflightpath:flightpath:4.8.3