CVEDB API

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.8%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2025-31500

Bestpractical » Request Tracker » Version: 5.0.0

cpe:2.3:a:bestpractical:request_tracker:5.0.0
Bestpractical » Request Tracker » Version: 5.0.1

cpe:2.3:a:bestpractical:request_tracker:5.0.1
Bestpractical » Request Tracker » Version: 5.0.2

cpe:2.3:a:bestpractical:request_tracker:5.0.2
Bestpractical » Request Tracker » Version: 5.0.3

cpe:2.3:a:bestpractical:request_tracker:5.0.3
Bestpractical » Request Tracker » Version: 5.0.4

cpe:2.3:a:bestpractical:request_tracker:5.0.4
Bestpractical » Request Tracker » Version: 5.0.5

cpe:2.3:a:bestpractical:request_tracker:5.0.5
Bestpractical » Request Tracker » Version: 5.0.6

cpe:2.3:a:bestpractical:request_tracker:5.0.6
Bestpractical » Request Tracker » Version: 5.0.7

cpe:2.3:a:bestpractical:request_tracker:5.0.7