Vulnerabilities > Mantisbt > Mantisbt > 2.2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-03-31 | CVE-2017-6973 | Cross-site Scripting vulnerability in Mantisbt A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. | 3.5 |