CVE-2014-9270

2014-12-08T11:59:10
ID CVE-2014-9270
Type cve
Reporter NVD
Modified 2017-09-07T21:29:33

Description

Cross-site scripting (XSS) vulnerability in the projax_array_serialize_for_autocomplete function in core/projax_api.php in MantisBT 1.1.0a3 through 1.2.17 allows remote attackers to inject arbitrary web script or HTML via the "profile/Platform" field.