high7.2
CVE-2025-31501
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.
Impact
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestpractical | Request Tracker | from 4.4.0 before 4.4.8 from 5.0.0 before 5.0.8 |