CVE-2025-31500: XSS
Published May 28, 2025
·Updated
Best Practical RT (Request Tracker) 5.0 through 5.0.7 allows XSS via JavaScript injection in an Asset name.
Affected Software
2 affected components
Best Practical RT>=5.0<=5.0.7
bestpractical Request Tracker>=5.0.0<5.0.8
Event History
May 28, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31500?
CVE-2025-31500 is classified as a medium severity vulnerability due to the potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2025-31500?
To fix CVE-2025-31500, upgrade Best Practical RT to version 5.0.8 or later.
3
What type of vulnerability is CVE-2025-31500?
CVE-2025-31500 is a Cross-Site Scripting (XSS) vulnerability caused by JavaScript injection in an Asset name.
4
What versions of Best Practical RT are affected by CVE-2025-31500?
Versions of Best Practical RT from 5.0 to 5.0.7 are affected by CVE-2025-31500.
5
Can CVE-2025-31500 be exploited remotely?
Yes, CVE-2025-31500 can be exploited remotely, allowing attackers to inject malicious scripts.