CVE-2022-28508 | BDVDB-2026-175290 Detail

Description#

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://mantisbt.org/
https://sourceforge.net/projects/mantisbt/
https://github.com/YavuzSahbaz/CVE-2022-28508/blob/main/MantisBT%202.25.2%20XSS%20vulnurability

Exploit#

No public exploit known

History#

Version 12022-05-04Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.