{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.25.2"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2022-28508"],"ecosystem":"Packagist","epss":0.0517,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wfg2-2wmw-6894","id":"tcs_01M5KFA0ZXJWE8MT32Y0MH795X","modified_at":"2025-06-09T22:42:05.092161Z","published_at":"2022-05-05T00:00:20Z","references":["https://osv.dev/vulnerability/GHSA-wfg2-2wmw-6894","https://nvd.nist.gov/vuln/detail/CVE-2022-28508","https://github.com/YavuzSahbaz/CVE-2022-28508/blob/main/MantisBT%202.25.2%20XSS%20vulnurability","https://github.com/mantisbt/mantisbt","https://mantisbt.org","https://sourceforge.net/projects/mantisbt"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-wfg2-2wmw-6894","url":"https://osv.dev/vulnerability/GHSA-wfg2-2wmw-6894"}],"summary":"MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php"}