Tag

Cve-2026-33548

1 brief RSS

MantisBT Stored XSS Vulnerability via Tag Timeline Display

A stored HTML injection vulnerability (CVE-2026-33548) exists in MantisBT version 2.28.0, allowing attackers to inject HTML and execute arbitrary JavaScript by manipulating tag names displayed in the timeline due to improper escaping.

MantisBT xss html-injection cve-2026-33548 webserver

2r 1t Jan 3, 2024