https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T21:28:48.297948+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTA-2010-AVI-473 CERTA-2010-AVI-473 — MantisBT présente des vulnérabilités de type injection de code indirecte (XSS). 2026-10-04T21:28:48.302116+00:00 CERTA-2010-AVI-473 https://vulnerability.circl.lu/vuln/fkie_cve-2010-3303 fkie_cve-2010-3303 2026-10-04T21:28:48.302181+00:00

Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) a plugin name, related to manage_plugin_uninstall.php; (2) an enumeration value or (3) a String value of a custom field, related to core/cfdefs/cfdef_standard.php; or a (4) project or (5) category name to print_all_bug_page_word.php.

 https://vulnerability.circl.lu/vuln/ghsa-f89q-pjfj-224q GHSA-f89q-pjfj-224q 2026-10-04T21:28:48.302240+00:00

Multiple cross-site scripting (XSS) vulnerabilities in MantisBT before 1.2.3 allow remote authenticated administrators to inject arbitrary web script or HTML via (1) a plugin name, related to manage_plugin_uninstall.php; (2) an enumeration value or (3) a String value of a custom field, related to core/cfdefs/cfdef_standard.php; or a (4) project or (5) category name to print_all_bug_page_word.php.

 https://vulnerability.circl.lu/vuln/gsd-2010-3303 gsd-2010-3303 2026-10-04T21:28:48.302273+00:00 gsd-2010-3303