CVE-2026-13225EPSS p27.2%

CVE-2026-13225CVE-2026-13225

Description

Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that order.

Scoring

EPSS0.34% probability of exploitation · percentile 27.2% · 2026-08-11T12:00:17Z
Last modified2026-06-25
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.