Cross-site Scripting (XSS)

Overview mantisbt/mantisbt is a mantis bug tracker. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the pattern attribute in form inputs. An attacker can inject HTML or execute arbitrary JavaScript by crafting malicious input that exploits improper escaping of thi...

PT-2020-16066

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 2.24.3 Description An issue was discovered that allows HTML injection and potentially the execution of arbitrary JavaScript when editing an issue in a project with a custom field that has a crafted regular expression...