PT-2026-61665
CVE-2026-44228
·
Published
2026-07-20
·
Updated
2026-08-07
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
RT versions 6.0.0 through 6.0.2
Description
An authenticated user with specific permissions can inject JavaScript into user-controlled data that is rendered without proper HTML escaping. This leads to a stored Cross-Site Scripting (XSS) issue, where the malicious script executes when another user views the affected page.
Recommendations
Update to version 6.0.3.
Found an issue in the description? Have something to add? Feel free to write us 👾