CVE-2022-26144

An XSS issue was discovered in MantisBT before 2.25.3

published April 13, 2022

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

An XSS issue was discovered in MantisBT before 2.25.3. Improper escaping of a Plugin name allows execution of arbitrary code (if CSP allows it) in manage_plugin_page.php and manage_plugin_uninstall.php when a crafted plugin is installed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00835 · 57.3th percentile
Published
2022-04-13T13:54Z
EPSS history
Timeline
  • 13 APR 13:54Z
    An XSS issue was discovered in MantisBT before 2.25.3
    cvelistv5