THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-44228 (MEDIUM 5.4) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting (XSS) vulnerability, where user-controlled data is rendered without proper HTML escaping. An authenticated user with permission

[NVD] CVE-2026-44228 (MEDIUM 5.4) — RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting (XSS) vulnerability, where user-controlled data is rendered without proper HTML escaping. An authenticated user with permission

mednvdPublished 2026-07-20

CVE-2026-44228 CVSS: 5.4 MEDIUM Published: 2026-07-20T18:16:52.323

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting (XSS) vulnerability, where user-controlled data is rendered without proper HTML escaping. An authenticated user with permission to set the relevant data can inject JavaScript that

MITRE ATT&CK techniques

JavaScriptT1059.007

Indicators of compromise

CVE-2026-44228cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-44228