| Package | Affected versions | Patched versions |
|---|---|---|
| mantisbt | = 1.2.12= 1.2.13 |
Cross-site scripting (XSS) vulnerability in the filter_draw_selection_area2 function in core/filter_api.php in MantisBT 1.2.12 before 1.2.13 allows remote attackers to inject arbitrary web script or HTML via the match_type parameter to bugs/search.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free