[MEDIUM] MantisBT SQL Injection via mc_project_get_users function

PKSA-hcc7-ghdp-n96c CVE-2020-28413 GHSA-49w9-82cj-xr48

Affected package: mantisbt/mantisbt

Affected version: <=2.24.3

Reported by:
GitHub