Cross-Site Scripting in MantisBT Vulnerable Products
CVE-2022-28508

6.1MEDIUM

Key Information:

Vendor: Mantisbt
Status: Mantisbt
Vendor: CVE Published:; 4 May 2022

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-28508?

An XSS vulnerability exists in MantisBT prior to version 2.25.2 within the 'browser_search_plugin.php' file. The flaw arises from the unescaped output of the return parameter, which could allow an attacker to inject malicious code into a hidden input field. This could lead to unauthorized script execution in the context of a user's session, posing significant security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2022-28508
Created by YavuzSahbaz