{"action":"Upgrade mantisbt/mantisbt to 1.3.8 or later.","affected":[{"fixed":"1.3.8","introduced":"0"},{"fixed":"2.1.2","introduced":"2.0.0"},{"fixed":"2.2.2","introduced":"2.2.0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2017-6973"],"ecosystem":"Packagist","epss":0.00929,"exploited":false,"fixed_versions":["1.3.8","2.1.2","2.2.2"],"ghsa_id":"GHSA-v7qf-22rw-chph","id":"tcs_01M5KF8YEA355QD8X0JVVKGSAQ","modified_at":"2025-06-11T19:57:18.583919Z","published_at":"2022-05-17T02:30:07Z","references":["https://osv.dev/vulnerability/GHSA-v7qf-22rw-chph","https://nvd.nist.gov/vuln/detail/CVE-2017-6973","https://github.com/mantisbt/mantisbt/commit/034cd07b47af37366fc7b726cb4a4f971d3d3fb9","https://github.com/mantisbt/mantisbt/commit/15e52e84c389afe8b03ed3cdb59b6549257ed197","https://github.com/mantisbt/mantisbt/commit/da74c5aa02bcf21cfaab1180f892c22415e5fea6","https://github.com/mantisbt/mantisbt","http://www.mantisbt.org/bugs/view.php?id=22537"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-v7qf-22rw-chph","url":"https://osv.dev/vulnerability/GHSA-v7qf-22rw-chph"}],"summary":"MantisBT XSS via adm_config_report.php's action parameter"}