Lucene search

K
prionPRIOn knowledge basePRION:CVE-2016-7111
HistoryFeb 17, 2017 - 5:59 p.m.

Cross site scripting

2017-02-1717:59:00
PRIOn knowledge base
www.prio-n.com
2

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%

MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.

CPENameOperatorVersion
mantisbteq2.0.0 beta1
mantisbtle1.3.0

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.5%

Related for PRION:CVE-2016-7111