CVE-2010-3303

CVE-2010-3303 describes multiple cross-site scripting (XSS) vulnerabilities in MantisBT versions prior to 1.2.3. These flaws allow authenticated administrators to inject malicious web script or HTML through various input fields, including plugin names, custom field values, and project or category names. With a CVSS score of 3.5, this vulnerability has a medium attack complexity and requires authentication, potentially leading to information disclosure or defacement. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.