CVE-2022-28508

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2

published May 4, 2022

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05170 · 92.4th percentile
Published
2022-05-04T13:50Z
EPSS history
Timeline
  • 04 MAY 13:50Z
    An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2
    cvelistv5