CVE-2025-31500

Publication date

2025-05-28 00:00:00

Family

mitre

State

PUBLISHED

Description

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.