https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T12:43:05.278902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-6841 CVE-2026-6841 — Reflected XSS in Request Tracker 2026-10-07T12:43:05.280406+00:00

Affected: Best Practical Request Tracker

Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser.

This vulnerability affects versions from 5.0.4 up to 5.0.9 and from 6.0.0 up to 6.0.2.