Product by Pretix

    Pretix

    25 known vulnerabilities in Pretix (Pretix), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Pretix (Pretix)
    CriticalCVE-2024-27447

    Pretix: security vulnerability

    		9.8
    HighCVE-2026-57532

    Pretix: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    		—
    MediumCVE-2026-101274

    Pretix: Missing Authentication for Critical Function

    		—
    HighCVE-2026-13602

    Session takeover vulnerability

    also in 1 other product

    		—
    MediumCVE-2026-101273

    Giftcard enumeration

    		—
    MediumCVE-2026-13225

    Stored XSS in ticket confirmation page

    		—
    HighCVE-2026-2452

    Unsafe variable evaluation in email templates

    		6.5
    HighCVE-2026-2451

    Unsafe variable evaluation in email templates

    		6.5
    HighCVE-2026-2415

    Unsafe variable evaluation in email templates

    		5.9
    LowCVE-2026-101272

    Incorrect session validation for API-created shredder exports

    		—
    HighCVE-2024-8113

    Stored XSS in Placeholder Samples in Mail Preview

    		5.4
    MediumCVE-2026-5600

    Pretix: Improper Isolation or Compartmentalization

    		4.3
    LowCVE-2026-101267

    Revenue information leak

    		—
    MediumCVE-2025-13742

    Limited HTML injection in emails

    		6.1
    LowCVE-2026-101269

    Incorrect session validation for API-uploaded files

    		—
    LowCVE-2026-101270

    HTML injection

    		—
    LowCVE-2026-101271

    OAuth credentials not disabled when application is disabled

    		—
    LowCVE-2026-57535

    Pretix: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    		—
    LowCVE-2026-101266

    Checkout validation bypass

    		—
    LowCVE-2026-9712

    Insecure direct object reference

    		—
    LowCVE-2026-11764

    Data exposed without proper permission

    		—
    LowCVE-2026-101268

    Customer session fixation

    		—
    LowCVE-2025-14881

    Insecure direct object reference

    		—
    LowCVE-2025-14882

    Insecure direct object reference

    also in 1 other product

    		—
    LowCVE-2026-57533

    Pretix: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

    		—

    All products by Pretix