MantisBT 2.1.0 < 2.28.2 Saved-Filter Owner Column Stored XSS (GHSA-f633-865q-2mhh)

Language:

Version 1.3 May 29, 2026, 5:27 PM CVSS metrics ("Cvssv4 score" set to 7.5) CVSS metrics ("Cvssv4 vector" set to "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N") Plugin Feed: 202605291727
Version 1.2 May 19, 2026, 3:29 PM CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:U") CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False") Exploit attributes ("Exploitability ease" set to "No known exploits are available") Plugin Feed: 202605191529
Version 1.1 May 18, 2026, 10:15 PM New Plugin Feed: 202605182215

* Changelogs are generally available for changes made after Nov 1, 2022