Request Tracker (Best Practical) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-21. Vendor: Best Practical.

CVEs of Request Tracker

• CVE-2026-6841 - CVSS 6.1 (medium), 2026-05-21: Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL…
• CVE-2025-9158 - CVSS 5.3 (medium), 2025-10-24: The Request Tracker software is vulnerable to a Stored XSS vulnerability in calendar invitation parsing feature, which displays invitation data without HTML…