CVE-2026-13225EPSS p36.5%

CVE-2026-13225CVE-2026-13225

Description

Malicious HTML content could be injected into the email address of an order, which pretix showed without sanitization on the confirmation page for individual tickets in that order.

Scoring

EPSS0.44% probability of exploitation · percentile 36.5% · 2026-10-06T12:00:23Z
Last modified2026-06-25
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.