CVE-2024-41348

openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2024-08-29

Last modified

2026-01-26

Weaknesses

CWE-79

Affected products

• Openflights (Jpatokal)

References

• https://github.com/jpatokal/openflights/commit/d815df727a94fe98d3299873f0efddf6a81a56a3
• https://github.com/jpatokal/openflights/commit/e7f5d8112d5353cc1ceb6ae92aa5ff2f3c2e35a6
• https://github.com/jpatokal/openflights/issues/1478