EUVD-2021-20249

Malware in sbrugna...

GHSA-52CX-VPHC-JMJM MantisBT allows XSS in manage_custom_field_edit_page.php

An XSS issue was discovered in managecustomfieldeditpage.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field...

MantisBT 跨站脚本漏洞

MantisBT is a lightweight, free and open source, web-based defect tracking system. A cross-site scripting vulnerability exists in managecustomfieldeditpage.php in versions of MantisBT prior to 2.25.2. An attacker can exploit this vulnerability to inject code into hidden input fields...

PT-2021-3656

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.2 Description The issue is related to a lack of protection of the web page structure in the manage custom field edit page.php component of the MantisBT bug tracking system. This allows a remote attacker to perfo...

PT-2021-11802

Name of the Vulnerable Software and Affected Versions: MantisBT versions through 2.24.3 Description: An issue was discovered where the custom field name in the helper ensure confirmed call in manage custom field update.php is not sanitized. This may be problematic depending on Content Security...

PT-2017-8711

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the return parameter in the manage custom field edit page.php file. Recommendations For Mantis...