FreeBSD : mantis -- multiple vulnerabilities (9b1699ff-d84c-11eb-92d6-1b6ff3dfe4d3)

Mantis 2.25.1 and 2.25.2 releases report : Security and maintenance release, PHPMailer update to 6.5.0 - 0028552: XSS in managecustomfieldeditpage.php CVE-2021-33557 - 0028821: Update PHPMailer to 6.5.0 CVE-2021-3603, CVE-2020-36326 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

CVE-2021-33557

creationtimestamp| type| source ---|---|--- 2021-06-17 22:11:14+00:00| seen| https://t.me/cibsecurity/25531...

CVE-2021-33557

Issue summary: CVE-2021-33557 is an XSS vulnerability in MantisBT before 2.25.2. The flaw is in manage_custom_field_edit_page.php where the return parameter is echoed unescaped, enabling injection of script into a hidden input field. Affected components/versions: MantisBT up to version 2.25.1 (pr...

mantis -- multiple vulnerabilities

Mantis 2.25.1 and 2.25.2 releases report: Security and maintenance release, PHPMailer update to 6.5.0 0028552: XSS in managecustomfieldeditpage.php CVE-2021-33557 0028821: Update PHPMailer to 6.5.0 CVE-2021-3603, CVE-2020-36326...