Vulnerabilities in indico
9 resultsCVE-2026-33046HIGHIndico discloses local files resulting in Remote Code Execution through LaTeX injectionEPSS 0.8%CVE-2025-53640MEDIUMIndico vulnerable to user enumeration via API endpointEPSS 0.6%CVE-2023-37901MEDIUMCross-Site-Scripting via confirmation promptsEPSS 0.4%CVE-2024-45399MEDIUMIndico has a Cross-Site-Scripting during account creationEPSS 0.4%CVE-2026-28352MEDIUMIndico missing access check in event series management APIEPSS 0.3%CVE-2025-59034MEDIUMIndico may disclose unauthorized user details access via legacy APIEPSS 0.2%CVE-2025-59035MEDIUMIndico vulnerable to Cross-Site Scripting via LaTeX math codeEPSS 0.2%CVE-2026-25738MEDIUMIndico has Server-Side Request Forgery (SSRF) in multiple placesEPSS 0.2%CVE-2026-25739MEDIUMIndico affected by Cross-Site-Scripting via material uploadsEPSS 0.2%