| Package | Affected versions | Patched versions |
|---|---|---|
| mantisbt/mantisbt | ≥ 2.28.0, < 2.28.2 | 2.28.2 |
| mantisbt | = 2.28.0 |
Improper escaping of tag names retrieved from History in Timeline (my_view_page.php) allows an attacker to inject HTML and, if CSP settings permit, achieve execution of arbitrary JavaScript, when displaying a tag that has been renamed or deleted.
Cross-site scripting (XSS).
f32787c14d4518476fe7f05f992dbfe6eaccd815
$this->tag_name in a string_html_specialchars() call in IssueTagTimelineEvent::html()MantisBT thanks Vishal Shukla for discovering and responsibly reporting the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free