HTML Injection Vulnerability in Pretix E-commerce Platform

CVE-2026-13225

What is CVE-2026-13225?

A vulnerability exists in the Pretix platform where malicious HTML content can be injected into the email field of an order. This content is then displayed unchecked on the order confirmation page for individual tickets, posing a risk to users through potential malicious exploitation. It is crucial for users to remain vigilant and ensure the application is updated to mitigate such vulnerabilities.

References