CVE-2026-13314lowCWE-80

CVE-2026-13314: low-severity vulnerability in pretix-digital

Stored XSS in pretix-digital

Published 25 Jun 2026

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2epss 0.4%

Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.

CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Affected products

References