Vulnerabilities > Mantisbt > Mantisbt > 2.2.1

DATE CVE VULNERABILITY TITLE RISK
2017-03-31 CVE-2017-6973 Cross-site Scripting vulnerability in Mantisbt
A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter.
network
mantisbt CWE-79
3.5