CVE-2020-8981 is a vulnerability in MantisBT Source Integration
Published on February 13, 2020
A cross-site scripting (XSS) vulnerability was discovered in the Source Integration plugin before 1.6.2 and 2.x before 2.3.1 for MantisBT. The repo_delete.php Delete Repository page allows execution of arbitrary code via a repo name (if CSP settings permit it). This is related to CVE-2018-16362.
Products Associated with CVE-2020-8981
Want to know whenever a new CVE is published for MantisBT Source Integration? stack.watch will email you.
Exploit Probability
EPSS
1.07%
Percentile
60.34%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.