CVE

CVE-2022-28508

6.1

CVSS

Description

An XSS issue was discovered in browser_search_plugin.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.

Attack Vector

Privileges Req.

User Interaction

Updated Oct 12, 2026View on NVD →

S4E scanner

mediumWeb Vulnerabilities~10 seconds

CVE-2022-28508 Scanner

CVE-2022-28508 Scanner - Cross-Site Scripting vulnerability in MantisBT

Used 2.7k times · 3.4k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →