November 14, 2026

CVE Watchtower

CVE-2026-57534pretix pretix-pages

NVD

Vulnerability Summary

Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.
Severity Level
UNKNOWN
Published Date
Jun 25, 2026
Last Modified
Jun 25, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.33%Probability
Root Weakness (CWE)
CWE-80 β†—
See the MITRE CWE entry for the full definition of this weakness.
CVSS v4.0 Base Metrics — Score 2.1 (LOW)
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
Attack VectorNetwork
Attack ComplexityLow
Attack RequirementsPresent
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)Low
Availability (Vulnerable System)Low
Confidentiality (Subsequent System)Low
Integrity (Subsequent System)Low
Availability (Subsequent System)Low

Affected & Patched Versions

Affected Versions
  • pretix pretix-pages < 1.6.4
Patched Versions
  • pretix pretix-pages 1.6.4

What to do

Fix it during your normal patch cycle. No exploitation is confirmed yet.

  1. Check whether you run pretix pretix-pages and which version.
  2. Update to a patched version listed above, then confirm the new version.

Timeline

  • Jun 25, 2026Published
  • Jun 25, 2026Record last modified

Score, severity and exploitation changes are tracked from the day Watchtower started logging them.

Get notified about new pretix pretix-pages CVEsYou are reading CVE-2026-57534. Get an email when KEV listings, exploits or new CVEs match your stack.
Set up CVE alerts

External References

Data last checked: Nov 14, 2026 01:09 UTC