CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-31501

Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an RT permalink.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.8%

CVSS Severity

CVSS v3 Score 7.2

References

Products affected by CVE-2025-31501

Bestpractical » Request Tracker » Version: 4.4.0

cpe:2.3:a:bestpractical:request_tracker:4.4.0
Bestpractical » Request Tracker » Version: 4.4.1

cpe:2.3:a:bestpractical:request_tracker:4.4.1
Bestpractical » Request Tracker » Version: 4.4.2

cpe:2.3:a:bestpractical:request_tracker:4.4.2
Bestpractical » Request Tracker » Version: 4.4.3

cpe:2.3:a:bestpractical:request_tracker:4.4.3
Bestpractical » Request Tracker » Version: 4.4.4

cpe:2.3:a:bestpractical:request_tracker:4.4.4
Bestpractical » Request Tracker » Version: 4.4.5

cpe:2.3:a:bestpractical:request_tracker:4.4.5
Bestpractical » Request Tracker » Version: 4.4.6

cpe:2.3:a:bestpractical:request_tracker:4.4.6
Bestpractical » Request Tracker » Version: 4.4.7

cpe:2.3:a:bestpractical:request_tracker:4.4.7
Bestpractical » Request Tracker » Version: 5.0.0

cpe:2.3:a:bestpractical:request_tracker:5.0.0
Bestpractical » Request Tracker » Version: 5.0.1

cpe:2.3:a:bestpractical:request_tracker:5.0.1
Bestpractical » Request Tracker » Version: 5.0.2

cpe:2.3:a:bestpractical:request_tracker:5.0.2
Bestpractical » Request Tracker » Version: 5.0.3

cpe:2.3:a:bestpractical:request_tracker:5.0.3
Bestpractical » Request Tracker » Version: 5.0.4

cpe:2.3:a:bestpractical:request_tracker:5.0.4
Bestpractical » Request Tracker » Version: 5.0.5

cpe:2.3:a:bestpractical:request_tracker:5.0.5
Bestpractical » Request Tracker » Version: 5.0.6

cpe:2.3:a:bestpractical:request_tracker:5.0.6
Bestpractical » Request Tracker » Version: 5.0.7

cpe:2.3:a:bestpractical:request_tracker:5.0.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-31501

Products

Pricing

Contact Us