GHSA-qghg-v7xv-q98qMediumCVSS 5.4

MantisBT XSS through crafted SVG documents in file_download.php

Published
June 25, 2022
Last Modified
June 11, 2025

🔗 CVE IDs covered (1)

CVE-2022-33910 →

📋 Description

An XSS vulnerability in MantisBT before 2.25.5 allows remote attackers to attach crafted SVG documents to issue reports or bugnotes. When a user or an admin clicks on the attachment, file_download.php opens the SVG document in a browser tab instead of downloading it as a file, causing the JavaScript code to execute.

🎯 Affected products1

  • composer/mantisbt/mantisbt:< 2.25.5

🔗 References (6)