Skip to content
OpenAdvisories

Vendor

pretalx

2 known vulnerabilities.

Products

pretalx 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-41241

    pretalx: Stored cross-site scripting in organiser search typeahead

    pretalx is a conference planning tool. Prior to 2026.1.0, The organiser search in the pretalx backend rendered submission titles, speaker display names, and user names/emails into the result dropdown using innerHTML string interpolation. Any user who controls…

    pretalx pretalx pretalx PyPI