Read the docs

pretix

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

pretix records in CISA KEV

No pretix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pretix 7 records MEDIUM Double Opt In Step 1 record LOW Newsletters 1 record LOW

Records

7 records in Pretix · all components

TI-2026-02082 CVE-2026-2452 · GHSA-mv9g-vp7w-xq67

Unsafe variable evaluation in email templates

Priority LOW 35

Emails sent by pretix can utilize placeholders that will be filled with customer data.

CVSS 4.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-02-16 Fixed in 2.0.1 CWE-627
TI-2026-02081 CVE-2026-2451 · GHSA-75mf-97wq-jjpw

Unsafe variable evaluation in email templates

Priority LOW 35

Emails sent by pretix can utilize placeholders that will be filled with customer data.

CVSS 4.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-02-16 Fixed in 1.3.2 CWE-627
TI-2026-02048 CVE-2026-2415 · GHSA-r8p8-qw9w-j9qv

Unsafe variable evaluation in email templates

Priority LOW 35

Emails sent by pretix can utilize placeholders that will be filled with customer data.

CVSS 4.0HIGH 7.5 Network Low privileges No interaction EPSS 0.00283 Published 2026-02-16 Fixed in 2026.1.1, 2025.10.2 +1 CWE-627
TI-2024-07522 CVE-2024-8113 · GHSA-45rp-q25w-4426

Stored XSS in Placeholder Samples in Mail Preview

Priority LOW 32

Stored XSS in organizer and event settings of pretix up to 2024.7.0 allows malicious event organizers to inject HTML tags into e-mail previews on settings page.

CVSS 4.0HIGH 7.2 Network High privileges User interaction EPSS 0.00322 Published 2024-08-23 Fixed in 2024.7.1 CWE-79
TI-2025-12562 CVE-2025-13742 · GHSA-2mm6-624x-fqrr

Limited HTML injection in emails

Priority LOW 12

Emails sent by pretix can utilize placeholders that will be filled with customer data.

CVSS 4.0LOW 2.4 Network No auth User interaction EPSS 0.00194 Published 2025-11-27 Fixed in 2025.10.0, 2025.7.3 +2 CWE-116
Open these records in search →