EUVD-2017-16273

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

MantisBT vulnerable to cross-site scripting in move_attachments_page.php file

Reporter	Title	Published	Views	Family All 10
CNVD	MantisBT Cross-Site Scripting Vulnerability (CNVD-2017-04628)	1 Apr 201700:00	–	cnvd
CVE	CVE-2017-7241	31 Mar 201704:26	–	cve
Cvelist	CVE-2017-7241	31 Mar 201704:26	–	cvelist
Github Security Blog	MantisBT XSS via move_attachments_page.php	17 May 202202:30	–	github
NVD	CVE-2017-7241	31 Mar 201704:59	–	nvd
OSV	GHSA-X53V-V9XP-GF6G MantisBT XSS via move_attachments_page.php	17 May 202202:30	–	osv
Prion	Cross site scripting	31 Mar 201704:59	–	prion
Snyk	Cross-site Scripting (XSS)	17 May 202202:30	–	snyk
SUSE CVE	SUSE CVE-2017-7241	15 Feb 202304:48	–	susecve
UbuntuCve	CVE-2017-7241	31 Mar 201704:59	–	ubuntucve

[
  {
    "enisaIdVendor": [
      {
        "id": "ae90da42-668b-385b-ab44-941748d249e2",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1bfe20fb-b58a-35e1-bec6-cfc20704760f",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2017-7241.html
openwall	www.openwall.com/lists/oss-security/2017/03/30/4
securitytracker	www.securitytracker.com/id/1038169
mantisbt	www.mantisbt.org/bugs/view.php
securityfocus	www.securityfocus.com/bid/97253
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-7241
github	www.github.com/mantisbt/mantisbt/commit/2d55c6476e939db021128b3995c28dcae05b09a4
github	www.github.com/mantisbt/mantisbt/commit/d31841c806a3c8379fcf6c9d9559451270b0f1cb
github	www.github.com/mantisbt/mantisbt/commit/ecef0e9b523a460709e8feedfce72f05bb30b992
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

4.9Medium risk

Vulners AI Score4.9

CVSS 34.8

CVSS 23.5

EPSS0.00804