Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/mantisbt/mantisbt@2.2.0
purl pkg:composer/mantisbt/mantisbt@2.2.0
Tags Ghost
Next non-vulnerable version 2.28.4
Latest non-vulnerable version 2.28.4
Risk score 2.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-4w6c-3hcx-rfj5
Aliases:
CVE-2017-7309
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page … There are no reported fixed by versions.
GHSA-v7qf-22rw-chph
Aliases:
CVE-2017-6973
MantisBT XSS via adm_config_report.php's action parameter A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote … There are no reported fixed by versions.
GHSA-x53v-v9xp-gf6g
Aliases:
CVE-2017-7241
MantisBT XSS via move_attachments_page.php A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) … There are no reported fixed by versions.
This package is not known to fix any advisories.