pretix Venueless vulnerabilities
6 published CVEs name pretix Venueless among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-82838
Default webserver configuration with incorrect CSP
pretix · venueless
Medium6.4 - CVE-2026-13350
Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create.
pretix · Venueless
Low2.3 - CVE-2026-12863
Open redirect
pretix · Venueless
Medium5.1 - CVE-2026-12862
XLSX formula injection in exports
pretix · Venueless
Medium5.1 - CVE-2026-5599
API allows deletion of users of other instance
pretix · Venueless
High7.3 - CVE-2026-4982
Unauthorized access to chat contents
pretix · Venueless
High7.3