description: A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.
problem types: Cross-Site Scripting
affected:
{
product: mantisBT
vendor: mantisBT
versions:
status: affected, version: 1.2.14
}