CVE-2017-6397

CVE-2017-6397 is a cross-site scripting (XSS) vulnerability in FlightAirMap v1.0-beta.10, stemming from insufficient input validation in various parameters across several *-sub-menu.php pages. An unauthenticated attacker could exploit this by injecting malicious HTML and script code, which would then execute in a victim's browser within the context of the vulnerable website, potentially leading to information disclosure or session hijacking. Rated Medium (CVSS 6.1), the attack requires user interaction (UI:R) but can be launched remotely (AV:N) with low complexity (AC:L). There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it is not currently a high-profile threat.