Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/mantisbt/mantisbt@2.1.0
purl pkg:composer/mantisbt/mantisbt@2.1.0
Tags Ghost
Next non-vulnerable version 2.28.4
Latest non-vulnerable version 2.28.4
Risk score 3.4
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
GHSA-4w6c-3hcx-rfj5
Aliases:
CVE-2017-7309
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page … There are no reported fixed by versions.
GHSA-ggjm-7m5f-7xjv
Aliases:
CVE-2018-17782
MantisBT allows XSS via the Manage Filter page A cross-site scripting (XSS) vulnerability in the Manage Filters page (manage_filter_page.php) in …
2.17.2
Vulnerable
2.17.2
Vulnerable
GHSA-mjp7-97w4-jwhc
Aliases:
CVE-2018-13055
MantisBT allows XSS via View Filters page A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT …
2.15.1
Vulnerable
2.15.1
Vulnerable
GHSA-gcqw-45xq-xc63
Aliases:
CVE-2018-17783
MantisBT allows XSS via Edit Filter page A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in …
2.17.2
Vulnerable
2.17.2
Vulnerable
GHSA-3qv7-98vm-xx2v
Aliases:
CVE-2018-16514
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and …
2.17.1
Vulnerable
GHSA-4rrc-5vp6-m3f6
Aliases:
CVE-2020-16266
MantisBT XSS issue on the view_all_bug_page.php An XSS issue was discovered in MantisBT before 2.24.2. Improper escaping on view_all_bug_page.php allows …
2.24.2
Vulnerable
GHSA-f633-865q-2mhh
Aliases:
CVE-2026-40607
MantisBT is Vulnerable to Stored XSS in Saved-Filter Owner Column Incorrect escaping of a saved filter's owner allows an attacker …
2.28.2
Vulnerable
This package is not known to fix any advisories.