CVE-2013-1931: Fedoraproject Fedora

Medium severity, CVSS 6.1. EPSS: 2.3% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in MantisBT 1.2.14 allows remote attackers to inject arbitrary web script or HTML via a version, related to deleting a version.

Affected products

• Fedoraproject Fedora: version 17 only; version 18 only
• Mantisbt Mantisbt: version 1.2.14 only

Published 2019-10-31. Last modified 2026-06-16.