November 15, 2026

CVE Watchtower

CVE-2026-13314pretix pretix-digital

NVD

Vulnerability Summary

Malicious HTML content could be injected into the content rendered by the pretix-digital plugin.
Severity Level
UNKNOWN
Published Date
Jun 25, 2026
Last Modified
Jun 25, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.33%Probability
Root Weakness (CWE)
CWE-80 β†—
See the MITRE CWE entry for the full definition of this weakness.
CVSS v4.0 Base Metrics — Score 2.0 (LOW)
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsPresent
Privileges RequiredHigh
User InteractionPassive
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)Low
Availability (Vulnerable System)Low
Confidentiality (Subsequent System)Low
Integrity (Subsequent System)Low
Availability (Subsequent System)Low

Affected & Patched Versions

Affected Versions
  • pretix pretix-digital < 1.6.5
Patched Versions
  • pretix pretix-digital 1.6.5

What to do

Fix it during your normal patch cycle. No exploitation is confirmed yet.

  1. Check whether you run pretix pretix-digital and which version.
  2. Update to a patched version listed above, then confirm the new version.

Timeline

  • Jun 25, 2026Published
  • Jun 25, 2026Record last modified

Score, severity and exploitation changes are tracked from the day Watchtower started logging them.

Get notified about new pretix pretix-digital CVEsYou are reading CVE-2026-13314. Get an email when KEV listings, exploits or new CVEs match your stack.
Set up CVE alerts

External References

Data last checked: Nov 15, 2026 02:13 UTC