CVE-2016-5364

Cross-site scripting XSS vulnerability in managecustomfieldeditpage.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter...

CVE-2016-5364

Cross-site scripting XSS vulnerability in managecustomfieldeditpage.php in MantisBT 1.2.19 and earlier allows remote attackers to inject arbitrary web script or HTML via the return parameter...

CVE-2016-5364

CVE-2016-5364 affects MantisBT

[SECURITY] [DLA 512-1] mantis security update

Package : mantis Version : 1.2.18-1+deb7u1 CVE ID : CVE-2016-5364 It was discovered that there was an XSS vulnerability in custom field management in mantis, a web-based bug tracking system. For Debian 7 "Wheezy", this issue has been fixed in mantis version 1.2.18-1+deb7u1. We recommend that you...