CVE-2017-6958 in MantisBT Source Integration Plugin

Summary

An XSS vulnerability in the MantisBT Source Integration Plugin (before 2.0.2) search result page allows an attacker to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings permit it) by crafting any valid parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 03/17/2017
• Disclosure: 03/17/2017
• Moderation: VulDB entry created
• Entries: VDB-98224 (1)
• CPE: ready
• CWE: CWE-79 (Confirmed)
• CVSS: 5.2
• EPSS: 0.00328
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6958
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6958
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6958/