CVE-2026-57533: Low severity pretix vulnerability

Published Jun 25, 2026

Updated

Malicious HTML content could be injected into the page pretix shows when redirection to an untrusted page occurs. Since this page has a Content-Security-Policy, this can mainly be used for phishing purposes.

Affected Software

1 affected component

pretix

Event History

Jun 25, 2026

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionWeakness

Data Sourced

via NVD·03:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-57533?

The severity of CVE-2026-57533 is rated at 18, indicating a high risk due to the potential for phishing attacks.

How does CVE-2026-57533 affect pretix security?

CVE-2026-57533 affects pretix by allowing malicious HTML content injection during redirection to untrusted pages, compromising user security.

What are the potential impacts of CVE-2026-57533?

The potential impacts of CVE-2026-57533 include phishing attacks that may deceive users into disclosing sensitive information.

How do I fix CVE-2026-57533?

To fix CVE-2026-57533, ensure that pretix is updated to the latest version that addresses this vulnerability.

Who is affected by CVE-2026-57533?

Users and administrators of pretix who rely on the software for transactions are affected by CVE-2026-57533.