Stored XSS in ticket confirmation page_CVE-2026-13225

5.3 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L

Description

Malicious HTML content could be injected into the email address of an
order, which pretix showed without sanitization on the confirmation page
for individual tickets in that order.

Basic Information

ID CVE-2026-13225

Source rami.io

Published Jun 25, 2026 at 14:26

Modified Jun 25, 2026 at 15:11

Affected Product

Vendor pretix

Product pretix

Affected Versions pretix pretix 0
pretix pretix 2026.4.0
pretix pretix 2026.5.0

CWE Classification

CWE-80

References

pretix.eu /about/en/blog/20260625-release-2026-5-2/

{
    "lastseen": "",
    "description": "Malicious HTML content could be injected into the email address of an \norder, which pretix showed without sanitization on the confirmation page\n for individual tickets in that order.",
    "published": "2026-06-25T14:26:31.972Z",
    "modified": "2026-06-25T15:11:12.132Z",
    "type": "cve",
    "title": "Stored XSS in ticket confirmation page",
    "source": "rami.io",
    "references": "https://pretix.eu/about/en/blog/20260625-release-2026-5-2/",
    "id": "CVE-2026-13225",
    "bulletinFamily": "",
    "cwe": [
        "CWE-80"
    ],
    "cvelist": null,
    "sourceData": "pretix pretix 0\npretix pretix 2026.4.0\npretix pretix 2026.5.0",
    "sourceHref": "",
    "cvss": {
        "score": 5.3,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "pretix",
    "version": "0",
    "vendor": "pretix",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}