Skip to content
OpenAdvisories

Package · PyPI

pretalx

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-41241

    pretalx: Stored cross-site scripting in organiser search typeahead

    pretalx is a conference planning tool. Prior to 2026.1.0, The organiser search in the pretalx backend rendered submission titles, speaker display names, and user names/emails into the result dropdown using innerHTML string interpolation. Any user who controls…

    pretalx pretalx pretalx PyPI