Medium severityGHSA Advisory· Published May 22, 2026· Updated May 23, 2026

CVE-2026-40598

Description

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the redirection page (retrieved from the request's Referer header) allows an attacker to inject HTML. While this is generally not directly actionable as modern browsers will URL-encode special characters, on some specific server configurations this could poison the cache, leading to cross-site scripting. This issue has been fixed in version 2.28.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mantisbt/mantisbtPackagist	< 2.28.2	2.28.2

Affected products

Mantisbt/MantisbtGHSA
Range: <= 2.28.1
ghsa-coords
pkg:composer/mantisbt/mantisbt
Range: < 2.28.2

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-6jh4-47v2-4g37ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2026-40598ghsaADVISORY
github.com/mantisbt/mantisbt/commit/b1ebc57763f104eb5f541b7b4d1ce6948168abd9nvdWEB
github.com/mantisbt/mantisbt/security/advisories/GHSA-6jh4-47v2-4g37nvdWEB
mantisbt.org/bugs/view.phpnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000