Lucene search
MitreCVELIST:CVE-2020-25830HistorySep 30, 2020 - 8:33 p.m.
CVE-2020-25830
2020-09-3020:33:43
mitre
www.cve.org
An issue was discovered in MantisBT before 2.24.3. Improper escaping of a custom field’s name allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript when attempting to update said custom field via bug_actiongroup_page.php.
Related
osv
osv
CVE-2020-25830
2020-09-30 21:15:13
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
2024-05-13 16:00:40
ubuntucve
ubuntucve
CVE-2020-25830
2020-09-30 00:00:00
cve
cve
CVE-2020-25830
2020-09-30 21:15:13
nvd
nvd
CVE-2020-25830
2020-09-30 21:15:13
prion
prion
Design/Logic Flaw
2020-09-30 21:15:00
github
github
MantisBT HTML Injection vulnerability
2022-05-24 17:29:51
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
2024-05-13 16:00:40
openvas
openvas
MantisBT < 2.24.3 Multiple Vulnerabilities - Windows
2020-10-02 00:00:00
MantisBT < 2.24.3 Multiple Vulnerabilities - Linux
2020-10-02 00:00:00
nessus
nessus
freebsd
freebsd
mantis -- multiple vulnerabilities
2020-09-13 00:00:00