CVE-2021-33557

An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2

published June 17, 2021

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01825 · 78.6th percentile
Published
2021-06-17T18:14Z
EPSS history
Timeline
  • 17 JUN 18:14Z
    An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2
    cvelistv5