PT-2017-17329

Name of the Vulnerable Software and Affected Versions MantisBT versions prior to 1.3.7 MantisBT versions 2.x prior to 2.2.1 Description A cross-site scripting issue allows remote attackers to inject arbitrary JavaScript via the action type parameter in the bug change status page.php file...