mantisbt-plugins/LinkedCustomFields

mantisbt-plugins/LinkedCustomFields

Releases5

Frequency3 years 1 month

Last Release over 2 years ago

Stars6

MantisBT plugin allowing custom fields to be linked, creating linked drop-downs

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-49802 ↗	Dec 11, 2023Monday, 11 December 2023, 22:15	6.7 MEDIUM	—
The LinkedCustomFields plugin for MantisBT allows users to link values between two custom fields, creating linked drop-downs. Prior to version 2.0.1, cross-site scripting in the MantisBT LinkedCustomFields plugin allows Javascript execution, when a crafted Custom Field is linked via the plugin and displayed when reporting a new Issue or editing an existing one. This issue is fixed in version 2.0.1. As a workaround, one may utilize MantisBT's default Content Security Policy, which blocks script execution.