PT-2021-3656

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.2 Description The issue is related to a lack of protection of the web page structure in the manage custom field edit page.php component of the MantisBT bug tracking system. This allows a remote attacker to perfo...

PT-2017-8711

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.2.19 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the return parameter in the manage custom field edit page.php file. Recommendations For Mantis...