CVE-2013-1934

2019-10-3119:05:16

redhat

www.cve.org

EPSS

0.003

Percentile

66.0%

JSON

A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.0rc1 before 1.2.14 allows remote authenticated users to inject arbitrary web script or HTML via a complex value.

CNA Affected

[
  {
    "product": "mantisBT",
    "vendor": "mantisBT",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.0rc1 before 1.2.14"
      }
    ]
  }
]