Skip to content
OpenAdvisories

Vendor

alfio-event

14 known vulnerabilities.

Products

alf.io 9 alfio-event/alf.io 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-41412

    alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Script

    alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully-functional HTTP client (`simpleHttpClient`) into every extension script's scope…

    alfio-event alf.io
  • Medium 6.5
    CVE-2024-45299

    alf.io's preloaded data as json is not escaped correctly

    alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting n…

    alfio-event alf.io
  • Medium 4.3
    CVE-2023-0301

    Cross-site Scripting (XSS) - Stored in alfio-event/alf.io

    Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

    alfio-event alfio-event/alf.io