CVE-2018-16362

An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT

published September 2, 2018

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT. A cross-site scripting (XSS) vulnerability in the Manage Repository and Changesets List pages allows execution of arbitrary code (if CSP settings permit it) via repo_manage_page.php or list.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01617 · 75.8th percentile
Published
2018-09-02T22:00Z
EPSS history
Timeline
  • 02 SEP 22:00Z
    An issue was discovered in the Source Integration plugin before 1.5.9 and 2.x before 2.1.5 for MantisBT
    cvelistv5