CVE-2019-15227

PoC —

CVSS 3.0

6.1 medium

EPSS

<1%p55

Published

Aug 20, 2019 (Aug 20, 2019)

Modified

Jun 17, 2026

Description

FlightPath 4.8.3 has XSS in the Content, Edit urgent message, and Users sections of the Admin Console. This could lead to cookie stealing and other malicious actions.

Vendors: getflightpath
Products: flightpath
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.