https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:35:28.713463+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-15770 EUVD-2026-15770 2026-10-23T23:35:28.716088+00:00 EUVD-2026-15770 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28508 fkie_cve-2022-28508 2026-10-23T23:35:28.716119+00:00

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

 https://cve.radiocsirt.org/vuln/ghsa-wfg2-2wmw-6894 GHSA-wfg2-2wmw-6894 — MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php 2026-10-23T23:35:28.716148+00:00

Affected: Packagist: mantisbt/mantisbt

An XSS issue was discovered in browser_search_plugin.php in MantisBT up to and including 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

 https://cve.radiocsirt.org/vuln/gsd-2022-28508 gsd-2022-28508 2026-10-23T23:35:28.716171+00:00 gsd-2022-28508