description: A cross-site scripting (XSS) vulnerability in the configuration report page (adm_config_report.php) in MantisBT 1.2.13 allows remote authenticated users to inject arbitrary web script or HTML via a project name.
problem types: Cross-Site Scripting
affected:
{
product: mantisBT
vendor: mantisBT
versions:
status: affected, version: 1.2.13
}