PT-2014-8916

Name of the Vulnerable Software and Affected Versions MantisBT versions 1.1.0a3 through 1.2.17 Description A cross-site scripting XSS issue exists due to a problem in the projax array serialize for autocomplete function. This allows remote attackers to inject arbitrary web script or HTML via the...