CVE-2014-9281

MEDIUM 4.3CVE-2014-9281 · Published 09/12/2014 · updated 17/06/2026

In short

CVE-2014-9281 is a MEDIUM (CVSS 4.3) vulnerability affecting mantisbt (mantisbt).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 83.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mantisbt mantisbt	`≤ 1.2.17`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in admin/copy_field.php in MantisBT before 1.2.18 allows remote attackers to inject arbitrary web script or HTML via the dest_id field.

References

seclists.org/oss-sec/2014/q4/867
seclists.org/oss-sec/2014/q4/913
seclists.org/oss-sec/2014/q4/924
secunia.com/advisories/62101
debian.org/security/2015/dsa-3120
securityfocus.com/bid/71371
exchange.xforce.ibmcloud.com/vulnerabilities/99038
mantisbt/mantisbt commit e5fc835 · Vendor Advisory
mantisbt.org/bugs/view.php

More vulnerabilities in mantisbt

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mantisbt

≤ 1.2.17

No fix yet

More vulnerabilities in mantisbt

See all →