Pretix Venueless
5 CVEs affecting Pretix Venueless. Latest disclosed: 2026-06-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-13350 | | 2026-06-25 | Permissions where checked incorrectly during room creation, allowing attackers to create rooms of types they shouldn't be allowed to create. | |
CVE-2026-12863 | | 2026-06-22 | An unvalidated redirect was contained in Venueless' social login functionality and could be exploited for phishing using trusted domains. | |
CVE-2026-12862 | | 2026-06-22 | Untrusted user data was passed verbatim to Excel exports for administrators. This allowed formula injection which can be used to compromise the environment of… | |
CVE-2026-5599 | | 2026-04-05 | A user with API access and "manage users" permission in any venueless world is able to trigger deletion of user accounts in other worlds. | |
CVE-2026-4982 | | 2026-03-27 | A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same s… |