CVE-2008-3331: Mantis

Low severity, CVSS 3.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in return_dynamic_filters.php in Mantis before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the filter_target parameter.

Affected products

• Mantis Mantis: up to and including 1.1.1; version 0.9 only; version 0.9.0 only; version 0.9.1 only; version 0.10 only; version 0.10.0 only; …

Published 2008-07-27. Last modified 2026-06-16.