PT-2019-14024
CVE-2019-15227
·
Published
2019-08-20
·
Updated
2019-08-28
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
FlightPath version 4.8.3
Description
The issue affects the Content, Edit urgent message, and Users sections of the Admin Console, where an XSS attack could occur, potentially leading to cookie stealing and other malicious actions.
Recommendations
For FlightPath version 4.8.3, update to a newer version that contains a fix for this issue to prevent XSS attacks in the Admin Console sections.
Found an issue in the description? Have something to add? Feel free to write us 👾