What’s Vulnerable › Vulnerabilities

CVE-2018-17783

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-10-30 · updated 2026-06-17
• Weakness: CWE-79

Description

A cross-site scripting (XSS) vulnerability in the Edit Filter page (manage_filter_edit page.php) in MantisBT 2.1.0 through 2.17.1 allows remote attackers (if access rights permit it) to inject arbitrary code (if CSP settings permit it) through a crafted project name.

Affected products

• mantisbt: from 2.1.0 through 2.17.1

References

• https://mantisbt.org/blog/archives/mantisbt/613
• https://mantisbt.org/bugs/view.php?id=24814
• https://mantisbt.org/blog/archives/mantisbt/613
• https://mantisbt.org/bugs/view.php?id=24814

Get alerted when CVE-2018-17783 or the next vulnerability affects your stack