Skip to content
OpenAdvisories

Archive

22 February 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1

    MantisBT XSS in manage_custom_field_update.php

    An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.