{"action":"Upgrade mantisbt/mantisbt to 1.3.9 or later.","affected":[{"fixed":"1.3.9","introduced":"0"},{"fixed":"2.1.3","introduced":"2.0.0"},{"fixed":"2.2.3","introduced":"2.2.0"}],"component":"mantisbt/mantisbt","cve_ids":["CVE-2017-7241"],"ecosystem":"Packagist","epss":0.00929,"exploited":false,"fixed_versions":["1.3.9","2.1.3","2.2.3"],"ghsa_id":"GHSA-x53v-v9xp-gf6g","id":"tcs_01M5KFANNC1WHMDRHRJ2XSW01P","modified_at":"2025-06-11T19:42:17.406820Z","published_at":"2022-05-17T02:30:07Z","references":["https://osv.dev/vulnerability/GHSA-x53v-v9xp-gf6g","https://nvd.nist.gov/vuln/detail/CVE-2017-7241","https://github.com/mantisbt/mantisbt/commit/2d55c6476e939db021128b3995c28dcae05b09a4","https://github.com/mantisbt/mantisbt/commit/d31841c806a3c8379fcf6c9d9559451270b0f1cb","https://github.com/mantisbt/mantisbt/commit/ecef0e9b523a460709e8feedfce72f05bb30b992","https://github.com/mantisbt/mantisbt","http://www.mantisbt.org/bugs/view.php?id=22568"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-x53v-v9xp-gf6g","url":"https://osv.dev/vulnerability/GHSA-x53v-v9xp-gf6g"}],"summary":"MantisBT XSS via move_attachments_page.php"}