CVE-2026-57533CWE-80

Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs

Low · published June 25, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
21.1
In the wild
Unconfirmed
What it is

Malicious HTML content could be injected into the page pretix shows when

redirection to an untrusted page occurs. Since this page has a

Content-Security-Policy, this can mainly be used for phishing purposes.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00295 · 21.1th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2026-06-25T14:31Z
EPSS history
Timeline
  • 25 JUN 14:31Z
    Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs
    cvelistv5