CVE-2020-16266

CVE-2020-16266 is an XSS vulnerability in MantisBT prior to 2.24.2. The issue arises from improper escaping on view_all_bug_page.php, allowing an attacker to save malicious input into a text Custom Field and cause arbitrary HTML/JS execution in a user’s browser when viewing the issue (contingent ...