Cross-site Scripting (XSS)

MantisBT is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper output encoding of user-supplied parameters in /admin/install.php, which allows an attacker to inject malicious HTML that can be used for credential phishing or open redirect attacks...