2 matches found
CVE-2022-26144
An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary code if CSP allows it in managepluginpage.php and managepluginuninstall.php when a crafted plugin is installed...
6.1CVSS0.00835EPSS
SaveExploits0References5
CVE-2022-26144: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary code if CSP allows it in managepluginpage.php and managepluginuninstall.php when a crafted plugin is installed...
6.1CVSS6.7AI score0.00835EPSS
SaveExploits0References2
20