Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:55:45 +0000 CVE-2026-41897 — MantisBT: Reflected XSS in Rendering Dynamic Custom Textarea Field https://cve.radiocsirt.org/vuln/cve-2026-41897 <p><strong>Affected:</strong> mantisbt</p> <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target parameter on return_dynamic_filters.php (normally used as an AJAX in View Issues Page) allows an attacker to inject arbitrary HTML if the target is a TEXTAREA custom field. This vulnerability is fixed in 2.28.2.</p> <p><strong>Affected:</strong> mantisbt</p> <p>Mantis Bug Tracker (MantisBT) is an open source issue tracker. From 1.0.0 to 2.28.1, lack of validation of filter_target parameter on return_dynamic_filters.php (normally used as an AJAX in View Issues Page) allows an attacker to inject arbitrary HTML if the target is a TEXTAREA custom field. This vulnerability is fixed in 2.28.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-41897