{"action":"Upgrade mantisbt/mantisbt to 2.25.0 or later.","affected":[{"fixed":"2.25.0","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2020-35571"],"ecosystem":"Packagist","epss":0.00662,"exploited":false,"fixed_versions":["2.25.0"],"ghsa_id":"GHSA-cvrm-cr3m-qj92","id":"tcs_01M5KF18GT44ATZKKFMAXMDMYM","modified_at":"2025-05-30T14:29:37.476953Z","published_at":"2022-05-24T17:42:48Z","references":["https://osv.dev/vulnerability/GHSA-cvrm-cr3m-qj92","https://nvd.nist.gov/vuln/detail/CVE-2020-35571","https://github.com/mantisbt/mantisbt/commit/100c3d58c3f6f12b7a6cf97fba473ede521f20db","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=27768"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-cvrm-cr3m-qj92","url":"https://osv.dev/vulnerability/GHSA-cvrm-cr3m-qj92"}],"summary":"MantisBT XSS in manage_custom_field_update.php"}