https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 22:52:18 +0000 https://db.gcve.eu/vuln/cve-2026-105454 <p><strong>Affected:</strong> Best Practical Solutions Request Tracker</p> <p>RT&#39;s automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link&#39;s address can add a script that runs when the ticket history is displayed, with no further action by the viewer. Anyone who can add HTML content to a ticket can plant it. That includes an unauthenticated sender of HTML email to any queue that grants CreateTicket or ReplyToTicket to Everyone, which is routine for a queue that accepts mail from the public. The script runs in the session of any user who views the ticket, and can act in RT with that user&#39;s authority.</p> <p>This issue was fixed in version 5.0.11 and 6.0.4</p> <p><strong>Affected:</strong> Best Practical Solutions Request Tracker</p> <p>RT&#39;s automatic link creation for URLs in HTML ticket content does not HTML-escape the URL it places in the link. A URL crafted to break out of the link&#39;s address can add a script that runs when the ticket history is displayed, with no further action by the viewer. Anyone who can add HTML content to a ticket can plant it. That includes an unauthenticated sender of HTML email to any queue that grants CreateTicket or ReplyToTicket to Everyone, which is routine for a queue that accepts mail from the public. The script runs in the session of any user who views the ticket, and can act in RT with that user&#39;s authority.</p> <p>This issue was fixed in version 5.0.11 and 6.0.4</p> https://db.gcve.eu/vuln/cve-2026-105454