MantisBT 2.28.1 has been released 🚀
Security release addressing a critical vulnerability affecting the SOAP API on MySQL (CVE-2026-30849) and two HTML injection / XSS issues with tag names, as well as a few bugs including regressions introduced in 2.28.0.
https://mantisbt.org/blog/archives/mantisbt/811
⚠️ You should upgrade immediately if you're running on MySQL ⚠️