Skip to content
OpenAdvisories

Archive

4 May 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-28508 Public exploit Scanner template

    MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php

    An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.