[HIGH] MantisBT: SQL Injection via history_order Configuration Value

PKSA-3d2f-71dg-17ys CVE-2026-47142 GHSA-mw6p-33vw-46cc

Affected package: mantisbt/mantisbt

Affected version: <=2.28.3

Reported by:
GitHub