CVE-2026-101270: Pretix

Low severity, CVSS 2.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Malicious HTML content could be injected into the help texts of various fields with organizer permissions.

Affected products

• Pretix Pretix: from 0.0, before 2026.5.5 (fixed in 2026.5.5); from 2026.6.0, before 2026.6.2 (fixed in 2026.6.2); from 2026.7.0, before 2026.7.1 (fixed in 2026.7.1)

Published 2026-09-29. Last modified 2026-09-29.