WordPress GeoDirectory cross-site scripting vulnerability

WordPress GeoDirectory 2.8.192 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper cleaning of the twitterusername parameter input and insufficient output escaping. Additionally, the client-side HTML pattern attribute restrictions are not validat...

Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pattern attribute in form inputs. An attacker can inject HTML or execute arbitrary JavaScript by crafting malicious input that exploits improper escaping of thi...

PT-2020-16066

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.3 Description An issue was discovered that allows HTML injection and potentially the execution of arbitrary JavaScript when editing an issue in a project with a custom field that has a crafted regular expression...