{"action":"Upgrade mantisbt/mantisbt to 2.24.2 or later.","affected":[{"fixed":"2.24.2","introduced":"2.1.0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2020-16266"],"ecosystem":"Packagist","epss":0.01178,"exploited":false,"fixed_versions":["2.24.2"],"ghsa_id":"GHSA-4rrc-5vp6-m3f6","id":"tcs_01M5KEV99PDVE8XK66FHWSYSNW","modified_at":"2025-05-29T16:14:30.977644Z","published_at":"2022-05-24T17:25:22Z","references":["https://osv.dev/vulnerability/GHSA-4rrc-5vp6-m3f6","https://nvd.nist.gov/vuln/detail/CVE-2020-16266","https://github.com/mantisbt/mantisbt/commit/9ef8f23a8119221d010251112b1255630a46d903","https://github.com/mantisbt/mantisbt","https://mantisbt.org/blog/archives/mantisbt/665","https://mantisbt.org/bugs/view.php?id=27056"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-4rrc-5vp6-m3f6","url":"https://osv.dev/vulnerability/GHSA-4rrc-5vp6-m3f6"}],"summary":"MantisBT XSS issue on the view_all_bug_page.php"}