Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/11 7:39 p.m.14 views

GHSA-J7V9-F46R-2RP4 MantisBT is Vulnerable to Reflected XSS in Rendering Dynamic Custom Textarea Field

Lack of validation of filtertarget parameter on returndynamicfilters.php normally used as an AJAX in View Issues Page allows an attacker to inject arbitrary HTML if the target is a TEXTAREA custom field. Impact Cross-site scripting XSS Patches - c885af13f0b8596714ffe11df757c09f35fbd8f4 Workaround...

5.3CVSS5.9AI score0.00281EPSS
SaveExploits0References5
Rows per page
Query Builder