PT-2022-17692

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.25.3 Description An issue was discovered in MantisBT, where improper escaping of a Plugin name allows execution of arbitrary code in manage plugin page.php and manage plugin uninstall.php when a crafted plugin is...