Jakub Galczyk

A cross-site scripting issue exists due to a vulnerability in the filter draw selection area2 function. This allows remote attackers to inject arbitrary web script or HTML via the `match type` parameter to the "bugs/search.php" endpoint.

The issue allows remote attackers to obtain sensitive information. This is related to inadequate filtering and a SQL error.