CVE-2026-44230Medium· 6.1▾ SunlitRT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an att…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.3%
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to (but not including) 5.0.10, and 6.0.0 up to (but not including) 6.0.3 contain a reflected Cross-Site Scripting (XSS) vulnerability where an attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's browser session. This issue has been fixed in versions 5.0.10 and 6.0.3.
request_tracker >= 5.0.4, < 5.0.10request_tracker >= 6.0.0, < 6.0.3Upgrade past the affected range:
request_tracker 6.0.3Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44228Medium· 5.4RT is an open source, enterprise-grade issue and ticket tracking system
CVE-2026-44227Medium· 6.1RT is an open source, enterprise-grade issue and ticket tracking system
CVE-2026-44231Critical· 9.1RT is an open source, enterprise-grade issue and ticket tracking system
CVE-2021-41164High· 8.2CKEditor4 is an open source WYSIWYG HTML editor
CVE-2021-41184Medium· 6.5jQuery-UI is the official jQuery user interface library
CVE-2021-41183Medium· 6.5jQuery-UI is the official jQuery user interface library