passport number exposure INVOLVES HTML
The exposed passport and phone information was present in the HTML source of the booking page.
Explicit Confidence 98% · Jack Rhysider EP 84 Details
“someone can use that information to log into the airline’s website and click View Source and see your birth date, passport number”