Security Advisory

CVE-2017-12062

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-08-01 15:00:00

Last updated 2024-08-05 18:28:15

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled.

← Browse all CVEs View on cve.org ↗