CVE-2017-6797

Published: 2017-03-10T00:59Z

Last Modified: 2024-11-21T03:30Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 allows remote attackers to inject arbitrary JavaScript via the 'action_type' parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt