{"action":"Upgrade mantisbt/mantisbt to 1.3.9 or later.","affected":[{"fixed":"1.3.9","introduced":"0"},{"fixed":"2.1.3","introduced":"2.1.0"},{"fixed":"2.2.3","introduced":"2.2.0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2017-7309"],"ecosystem":"Packagist","epss":0.57319,"exploited":false,"fixed_versions":["1.3.9","2.1.3","2.2.3"],"ghsa_id":"GHSA-4w6c-3hcx-rfj5","id":"tcs_01M5KEVCG8JTNFF8E28YMG9QQ5","modified_at":"2025-06-09T22:42:04.946067Z","published_at":"2022-05-17T02:30:07Z","references":["https://osv.dev/vulnerability/GHSA-4w6c-3hcx-rfj5","https://nvd.nist.gov/vuln/detail/CVE-2017-7309","https://github.com/mantisbt/mantisbt/commit/0243375e32bc24878e309f3d6ef6d8cfb3e2f278","https://github.com/mantisbt/mantisbt/commit/c9e5b1d0404503022605459552faeaf610bf15ae","https://github.com/mantisbt/mantisbt/commit/e881dd79df422033bbea88914fc0a717fae40358","https://github.com/mantisbt/mantisbt","http://openwall.com/lists/oss-security/2017/03/30/4","http://www.mantisbt.org/bugs/view.php?id=22579"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-4w6c-3hcx-rfj5","url":"https://osv.dev/vulnerability/GHSA-4w6c-3hcx-rfj5"}],"summary":"MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php"}