CVE-2013-1932

A cross-site scripting XSS vulnerability in the configuration report page admconfigreport.php in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name...

CVE-2015-2046

CVE-2015-2046 affects MantisBT 1.2.13 and later up to, but excluding, 1.2.20. The vulnerability is a cross-site scripting (XSS) flaw in the web UI (notably affecting the adm_config_report.php flow) that can allow injection of arbitrary JavaScript. Root cause is inadequate input/output sanitizatio...

CVE-2014-8986

CVE-2014-8986 is a documented XSS vulnerability in MantisBT 1.2.13–1.2.17. The flaw resides in the Configuration Report page (adm_config_report.php) where the selection/filters of the Configuration Report can be exploited via the config_option parameter to inject arbitrary script/HTML. The connec...