Security Advisory

CVE-2020-16266

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-12 12:59:54

Last updated 2024-08-04 13:37:54

Assigner mitre

State PUBLISHED

Description

An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows a remote attacker to inject arbitrary HTML into the page by saving it into a text Custom Field, leading to possible code execution in the browser of any user subsequently viewing the issue (if CSP settings allow it).

← Browse all CVEs View on cve.org ↗