high7.2
CVE-2025-31500
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.
Impact
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestpractical | Request Tracker | from 5.0.0 before 5.0.8 |