CVE-2022-46088
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Mar 5, 2024
Updated: Jan 8, 2025
CWE ID 79
Summary
CVE-2022-46088 is a newly disclosed cross-site scripting (XSS) vulnerability affecting the Online Flight Booking Management System version 1.0. Malicious actors could exploit this flaw by injecting malicious scripts into the feedback form, potentially stealing user data or gaining unauthorized access to user accounts. Users are advised to avoid using the affected system until a patch is released, and administrators should prioritize updating their installations to mitigate the risk of attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.