[MEDIUM] MantisBT XSS via adm_config_report.php's action parameter

PKSA-jhf5-zpwn-9fxv CVE-2017-6973 GHSA-v7qf-22rw-chph

Affected package: mantisbt/mantisbt

Affected version: >=2.2.0,<2.2.2|>=2.0.0,<2.1.2|<1.3.8

Reported by:
GitHub