266366 matches found
CVE-2026-33548
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548 MantisBT has Stored HTML Injection / XSS when displaying Tags in Timeline
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-33548
MantisBT 2.28.0 is vulnerable to Stored HTML Injection / XSS when rendering tags in Timeline (Timeline view via my_view_page.php). Root cause: improper escaping of tag names retrieved from History in Timeline. Impact: if CSP permits, attacker could execute arbitrary JavaScript when displaying a r...
Mantis Bug Tracker 跨站脚本漏洞
Mantis Bug Tracker MantisBT is an open-source bug tracker developed by Mantis Bug Tracker. Version 2.28.0 of Mantis Bug Tracker contains a cross-site scripting vulnerability. This vulnerability arises from improper escaping of tag names in the timeline, which may lead to cross-site scripting...
PT-2026-27183
Name of the Vulnerable Software and Affected Versions Mantis Bug Tracker versions prior to 2.28.1 Description Mantis Bug Tracker version 2.28.0 contains a flaw due to improper escaping of tag names retrieved from History in the Timeline feature, specifically within the my view page.php file. This...
CVE-2026-33548: Improper Neutralization of Input During Web Page Generation
Mantis Bug Tracker MantisBT is an open source issue tracker. In version 2.28.0, improper escaping of tag names retrieved from History in Timeline myviewpage.php allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has...
CVE-2026-4552
creationtimestamp| type| source ---|---|--- 2026-03-22 16:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnybgee2n2n 2026-04-02 22:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikahaf73t2i...
CVE-2026-4535
creationtimestamp| type| source ---|---|--- 2026-03-21 08:47:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116266293950470223 2026-03-22 04:16:19+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4535 2026-03-22 06:00:31+00:00| seen|...
CVE-2026-4270
creationtimestamp| type| source ---|---|--- 2026-03-20 21:06:27+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mhjgbipipg2i 2026-03-25 16:08:38+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3mhvhxk4vtq2r...
CVE-2026-26933
creationtimestamp| type| source ---|---|--- 2026-03-20 13:10:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhilocfjpg2q 2026-03-20 15:00:39+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-prodotti-elastic...
CVE-2026-28070
creationtimestamp| type| source ---|---|--- 2026-03-19 07:59:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhfjty5rqv2n...
CVE-2025-40192
creationtimestamp| type| source ---|---|--- 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0397/ 2026-04-07 18:00:00+00:00| seen|...
EUVD-2026-11947
Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...
CVE-2026-32421
Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...
CVE-2026-32421 WordPress Post Timeline plugin <= 2.4.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...
CVE-2026-32421
Missing Authorization vulnerability in Agile Logix Post Timeline post-timeline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Timeline: from n/a through = 2.4.1...
CVE-2026-32421
The CVE concerns WordPress Post Timeline plugin (Post Timeline) versions up to 2.4.1 with a Missing Authorization vulnerability that enables bypass of access control. The issue is described as Broken Access Control affecting Post Timeline from unspecified versions up to and including 2.4.1, cause...