[MEDIUM] MantisBT XSS via move_attachments_page.php

PKSA-f32t-gmk7-tryx CVE-2017-7241 GHSA-x53v-v9xp-gf6g

Affected package: mantisbt/mantisbt

Affected version: >=2.2.0,<2.2.3|>=2.0.0,<2.1.3|<1.3.9

Reported by:
GitHub