openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/settings.php
CWE-79, CWE-79