MantisBT has Stored XSS on Move Attachments Admin Page
Unescaped Project Name allows an attacker that can set it (which typically requires manager or administrator access level) to inject HTML in Move Attachments admin page. ### Impact Cross-site scripting (XSS). This is mitigated by Content Security Policy which restricts scripts execution. ### Patches - 5cb4b469295889f5d2b01677c9bf82c143e0fdaa ### Workarounds None
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-44655US | — | — | ||
Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.3.0 to 2.28.1, unescaped Project Name allows an attacker that can set it (which typically requires manager or… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/mantisbt/mantisbtPACKAGE
- https://github.com/mantisbt/mantisbt/commit/5cb4b469295889f5d2b01677c9bf82c143e0fdaaWEB
- https://github.com/mantisbt/mantisbt/security/advisories/GHSA-7mqj-8gj2-cg59WEB
- https://mantisbt.org/bugs/view.php?id=37099WEB
- https://nvd.nist.gov/vuln/detail/CVE-2026-44655ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan