Medium
CVE-2020-25781
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 74
Reset filters
Medium
CVE-2020-25830
MantisBT HTML Injection vulnerability
Medium
CVE-2020-25288
MantisBT XXS where a Custom Field with a crafted Regular Expression property is used
Medium
CVE-2020-16266
MantisBT XSS issue on the view_all_bug_page.php
Medium
CVE-2019-15539
MantisBT XSS when uploading an attachment
High
CVE-2019-15715
MantisBT Remote Code Execution
Medium
CVE-2019-15074
MantisBT allows cross-site scripting (XSS) via crafted filename
Medium
CVE-2018-16514
MantisBT cross-site scripting (XSS) vulnerability through crafted PATH_INFO
Medium
CVE-2016-7111
MantisBT XSS through weak CSP when using Gravatar plugin
Medium
CVE-2017-7620
MantisBT vulnerable to CSRF and Open Redirect attacks
Medium
CVE-2017-7897
MantisBT XSS via my_view_page.php and view_user_page.php
Medium
CVE-2017-6973
MantisBT XSS via adm_config_report.php's action parameter
Medium
CVE-2017-7241
MantisBT XSS via move_attachments_page.php
Medium
CVE-2017-7309
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php
Medium
CVE-2017-12062
MantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php
Medium
CVE-2018-14504
MantisBT allows XSS on the Edit Filter page via crafted filter name
Medium
CVE-2018-13055
MantisBT allows XSS via View Filters page
Low
CVE-2010-2574
MantisBT Cross-site Scripting vulnerability
Medium
CVE-2018-17782
MantisBT allows XSS via the Manage Filter page
Medium
CVE-2018-17783
MantisBT allows XSS via Edit Filter page
High
CVE-2017-7615
MantisBT allows arbitrary password reset
Medium
CVE-2017-12061
MantisBT XSS allows unsanitized input via admin/install.php
Medium
CVE-2022-28508
MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php
High
CVE-2009-20001
MantisBT Insufficient Session Expiration cookie string not reset after logout
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.