pretalx vulnerabilities (PyPI)

4 vulnerabilities.

• pretalx PyPI pretalx: Stored cross-site scripting in organiser search typeahead CVE-2026-41241 Fix available 8.7 HighApril 18, 2026
• pretalx PyPI pretalx: Email injection via unescaped user-controlled placeholders in pretalx mail templates CVE-2026-41426 Fix available 6.1 MediumApril 18, 2026
• pretalx PyPI pretalx vulnerable to path traversal in HTML export CVE-2023-28459 Fix available 6.5 MediumApril 20, 2023
• pretalx PyPI pretalx allows path traversal in HTML export CVE-2023-28458 Public exploitFix available 4.3 MediumApril 20, 2023