📦 Pretix

This vulnerability allows authenticated users with email template editing permissions in pretix to exfiltrate sensitive system configuration data through malicious placeholder injection. Attackers can...

This vulnerability in pretix allows attackers to inject HTML/Markdown content into emails by using maliciously formatted attendee names. While XSS attacks are prevented by HTML allow-listing, attacker...

This stored cross-site scripting (XSS) vulnerability in pretix allows malicious event organizers to inject HTML tags into email previews on the settings page. While the default Content Security Policy...