AI Score
Confidence
High
EPSS
Percentile
35.7%
Best Practical Request Tracker (RT) before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment.
docs.bestpractical.com/release-notes/rt/4.4.6
docs.bestpractical.com/release-notes/rt/5.0.3
docs.bestpractical.com/release-notes/rt/index.html