[CRITICAL] MantisBT: Reflected XSS in admin/install.php

PKSA-cgcp-ngm1-hmmf CVE-2026-52847 GHSA-77x8-3v3h-hrhv

Affected package: mantisbt/mantisbt

Affected version: <=2.28.3

Reported by:
GitHub