CVE-2018-16514

A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) and Edit Filter page (manage_filter_edit_page.php) in MantisBT 2.1.0 through 2.17.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-13055.

• CWE-79

• https://mantisbt.org/bugs/view.php?id=24731Exploit, Issue Tracking, Vendor Advisory
• https://mantisbt.org/bugs/view.php?id=24731Exploit, Issue Tracking, Vendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-16499In VOS compromised, an attacker at network endpoints can pos…5.9
• CVE-2018-1650IBM QRadar SIEM 7.2 and 7.3 uses hard-coded credentials whic…5.9
• CVE-2018-16509An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16510An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16511An issue was discovered in Artifex Ghostscript before 9.24. …
• CVE-2018-16513In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-16515Matrix Synapse before 0.33.3.1 allows remote attackers to sp…
• CVE-2018-16516helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a craf…
• CVE-2018-16517asm/labels.c in Netwide Assembler (NASM) is prone to NULL Po…5.5
• CVE-2018-16518A directory traversal vulnerability with remote code executi…
• CVE-2018-16519COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting (XSS…
• CVE-2018-1652IBM DataPower Gateway 7.1.0.0 through 7.1.0.19, 7.2.0.0 thro…6.2