A vulnerability was found in bestpractical rt up to 6.0.2. It has been declared as problematic. This impacts an unknown function of the component HTML Escaping. Such manipulation leads to HTML injection.

This vulnerability is listed as CVE-2026-44228. The attack may be performed from remote. There is no available exploit.