[MEDIUM] MantisBT: Injection of TIME_TRACKING and REMINDER Notes via REST and SOAP APIs

PKSA-xw73-w41z-8sfx CVE-2026-52883 GHSA-4vpf-w7qv-5h3q

Affected package: mantisbt/mantisbt

Affected version: <=2.28.3

Reported by:
GitHub