← Database

CVE-2008-0404

MEDIUM CVSS: 4.3 Published: 2008-01-23 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Mantis before 1.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Most active bugs" summary.

Affected Platforms

Mantis Mantis

Weakness Type

CWE-79

References