← All advisories

High severity7.2NVD Advisory· Published May 28, 2025· Updated Jun 17, 2026

CVE-2025-30087

CVE-2025-30087

Description

Best Practical RT (Request Tracker) 4.4 through 4.4.7 and 5.0 through 5.0.7 allows XSS via injection of crafted parameters in a search URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Bestpractical/Request Tracker2 versions
cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bestpractical:request_tracker:*:*:*:*:*:*:*:*range: >=4.4.0,<4.4.8
- (no CPE)range: 4.4 - 4.4.7, 5.0 - 5.0.7
Bestpractical/Rtllm-create2 versions
4.4 - 4.4.7, 5.0 - 5.0.7+ 1 more
- (no CPE)range: 4.4 - 4.4.7, 5.0 - 5.0.7
- (no CPE)range: 4.4.0

Patches

Vulnerability mechanics

References

4

docs.bestpractical.com/release-notes/rt/4.4.8nvdRelease Notes
docs.bestpractical.com/release-notes/rt/5.0.8nvdRelease Notes
docs.bestpractical.com/release-notes/rt/index.htmlnvdRelease Notes
lists.debian.org/debian-lts-announce/2025/05/msg00009.htmlnvd

News mentions

0

No linked articles in our index yet.