GHSA-v84x-qvhg-f36r: MantisBT: Remote Code Execution via eval() Class Hoisting in adm_config_set.php

MantisBT versions 1.3.0 up to 2.28.3 contain a remote code execution vulnerability in the admin Manage Configuration feature (adm_config_set.php). The vulnerability arises from the use of PHP eval()…