Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-30087

Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.

Description

Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

bestpractical RT

Default version status: unaffected

  • 4.4.0 to < 4.4.8affected
  • 5.0.0 to < 5.0.8affected

References