{"action":"Upgrade mantisbt/mantisbt to 2.25.3 or later.","affected":[{"fixed":"2.25.3","introduced":"0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2022-26144"],"ecosystem":"Packagist","epss":0.00835,"exploited":false,"fixed_versions":["2.25.3"],"ghsa_id":"GHSA-rqgj-rqfr-5j6f","id":"tcs_01M5KF8G22DYTZ3P0STTY90ZHZ","modified_at":"2025-06-09T22:42:05.025441Z","published_at":"2022-04-14T00:00:19Z","references":["https://osv.dev/vulnerability/GHSA-rqgj-rqfr-5j6f","https://nvd.nist.gov/vuln/detail/CVE-2022-26144","https://github.com/mantisbt/mantisbt/commit/a7751c3e318011ca1314bc1cfea200d53e0dfff6","https://github.com/mantisbt/mantisbt","https://mantisbt.org/bugs/view.php?id=29688"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-rqgj-rqfr-5j6f","url":"https://osv.dev/vulnerability/GHSA-rqgj-rqfr-5j6f"}],"summary":"MantisBT vulnerable to XSS due to improper escape in manage_plugin_page.php and manage_plugin_uninstall.php"}