CVE-2017-6973

MEDIUM · CVSS 4.8 EPSS 0.93%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-03-31 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-6973

Severity

MEDIUM

CVSS

4.8

EPSS

0.93%

Original Filing — NVD Description

A cross-site scripting (XSS) vulnerability in the MantisBT Configuration Report page (adm_config_report.php) allows remote attackers to inject arbitrary code through a crafted 'action' parameter. This is fixed in 1.3.8, 2.1.2, and 2.2.2.