PT-2014-2500

Name of the Vulnerable Software and Affected Versions MantisBT version 1.2.12 Description The issue allows remote authenticated users with manager or administrator permissions to inject arbitrary web script or HTML. This can be achieved via a category name in the summary print by category functio...