HiEventsDev vulnerabilities
6 published CVEs name HiEventsDev among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-76838
Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook Redirects
HiEventsDev · Hi.Events
High8.4 - CVE-2026-60119
Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection
HiEventsDev · Hi.Events
Medium5.1 - CVE-2026-60118
Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
HiEventsDev · Hi.Events
Medium6.9 - CVE-2026-57960
Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id
HiEventsDev · Hi.Events
High8.3 - CVE-2026-57959
Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition
HiEventsDev · Hi.Events
High8.2 - CVE-2026-34455
Hi.Events: SQL Injection via Unvalidated sort_by Query Parameter in Multiple Repository Classes
HiEventsDev · Hi.Events
High8.7