CVE-2013-1932

2019-10-3119:05:12

redhat

www.cve.org

EPSS

0.002

Percentile

56.6%

JSON

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name.

CNA Affected

[
  {
    "product": "mantisBT",
    "vendor": "mantisBT",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.13"
      }
    ]
  }
]