Vulnerabilities in pretix
14 resultsCVE-2024-8113HIGHStored XSS in Placeholder Samples in Mail PreviewEPSS 0.3%CVE-2026-2452HIGHUnsafe variable evaluation in email templatesEPSS 0.3%CVE-2026-2451HIGHUnsafe variable evaluation in email templatesEPSS 0.3%CVE-2026-5600MEDIUMA new API endpoint introduced in pretix 2025 that is supposed to
return all check-in events of a specific event in fact returns all
check-EPSS 0.3%CVE-2026-5599HIGHAPI allows deletion of users of other instanceEPSS 0.2%CVE-2026-4982HIGHUnauthorized access to chat contentsEPSS 0.2%CVE-2026-2415HIGHUnsafe variable evaluation in email templatesEPSS 0.2%CVE-2026-11764LOWData exposed without proper permissionEPSS 0.2%CVE-2026-12863MEDIUMOpen redirectEPSS 0.2%CVE-2025-14881LOWInsecure direct object referenceEPSS 0.2%CVE-2026-12862MEDIUMXLSX formula injection in exportsEPSS 0.2%CVE-2025-14882LOWInsecure direct object referenceEPSS 0.2%CVE-2026-9712LOWInsecure direct object referenceEPSS 0.2%CVE-2025-13742LOWLimited HTML injection in emailsEPSS 0.2%