CVE-2017-6958

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if…

published March 17, 2017

CVSS
—
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00574 · 46.4th percentile
Published
2017-03-17T08:55Z
EPSS history
Timeline
  • 17 MAR 08:55Z
    An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if…
    cvelistv5