CVE-2009-2802: Improper Neutralization of Input During Web Page Generation

MantisBT 1.2.x before 1.2.2 insecurely handles attachments and MIME types. Arbitrary inline attachment rendering could lead to cross-domain scripting or other browser attacks...

PT-2019-6503

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.x through 1.2.1 MantisBT versions prior to 1.2.2 Description The issue concerns how MantisBT handles attachments and MIME types, leading to potential cross-domain scripting or other browser attacks due to arbitrary inline...