Skip to content
Threat Feed

Product

Mantisbt/Mantisbt (<= 2.28.1)

1 brief RSS
high threat

MantisBT Vulnerable to Stored XSS in File Download

MantisBT is vulnerable to stored cross-site scripting (XSS) via file_download.php by using the `show_inline=1` parameter with a valid CSRF token to upload a crafted XHTML attachment referencing a JavaScript attachment, leading to arbitrary code execution.

mantisbt/mantisbt xss mantisbt github advisory
2r 1t