Re: CVE Request: XSS vulnerability in MantisBT 1.2.13

[Damien Regad <dregad () mantisbt org>]

On 2014-11-15 02:26, P Richards wrote:
> We fixed this issue in Master with the following commit
> 
https://github.com/mantisbt/mantisbt/commit/cabacdc291c251bfde0dc2a2c945c02cef41bf40, 

> and I believe I requested this to be back-ported at the time. You
> modified the code not to trigger an error with the commit
> 
https://github.com/mantisbt/mantisbt/commit/3d0625d84d5d08a998673713df1711e1d46b0b86 

> and to fall back to the default of no value selected.

I don't think we're talking about the same issue here. The one you 
describe was about the selection list in the filters, this one is in the 
"set configuration" box.