Skip to content
OpenAdvisories

Vendor

alfio-event

14 known vulnerabilities.

Products

alf.io 9 alfio-event/alf.io 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2024-25627

    Cross-Site Scripting (XSS) via File Upload in Alf.io

    Alf.io is a free and open source event attendance management system. An administrator on the alf.io application is able to upload HTML files that trigger JavaScript payloads. As such, an attacker gaining administrative access to the alf.io application may be …

    alfio-event alf.io
  • Low 3.5
    CVE-2023-0300

    Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io

    Cross-site Scripting (XSS) - Reflected in GitHub repository alfio-event/alf.io prior to 2.0-M4-2301.

    alfio-event alfio-event/alf.io