PT-2011-4539

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.2.8 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the action parameter in bug actiongroup ext page.php, related to bug actiongroup page.php...