FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

mantis -- XSS vulnerability

Affected packages
mantis-php56 < 2.17.1,1
mantis-php70 < 2.17.1,1
mantis-php71 < 2.17.1,1
mantis-php72 < 2.17.1,1

Details

VuXML ID 6bf71117-c0c9-11e8-b760-6023b685b1ee
Discovery 2018-09-03
Entry 2018-09-25

Brian Carpenter reports:

Reflected XSS in view_filters_page.php via core/filter_form_api.php

References

CVE Name CVE-2018-16514