Seems that several flight company suffer from a XSS vuln into the Sutra's Airkiosk, an application for the realtime distribution of flights/booking and check-in interface (www.airkiosk.com). You can read the details here