CGM_Public/pretix_original
3
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-22 12:42:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

[SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225)

Browse Source
This commit is contained in:
Mira Weller
2026-06-25 16:46:13 +02:00
committed by Raphael Michel
parent 3442a543c8
commit 848f7fa0e5
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/pretix/presale/templates/pretixpresale/event/position.html
+2 -1
View File
@@ -4,6 +4,7 @@
{% load eventsignal %} {% load eventsignal %}
{% load money %} {% load money %}
{% load eventurl %} {% load eventurl %}
{% load wrap_in %}
{% block title %}{% trans "Registration details" %}{% endblock %} {% block title %}{% trans "Registration details" %}{% endblock %}
{% block content %} {% block content %}
<h2 class="h1"> <h2 class="h1">
@@ -48,7 +49,7 @@
</div> </div>
<div class="panel-body"> <div class="panel-body">
<p> <p>
{% blocktrans trimmed with email="<strong>"|add:order.email|add:"</strong>"|safe %} {% blocktrans trimmed with email=order.email|wrap_in:"strong" %}
This order is managed for you by {{ email }}. Please contact them for any questions regarding This order is managed for you by {{ email }}. Please contact them for any questions regarding
payment, cancellation or changes to this order. payment, cancellation or changes to this order.
{% endblocktrans %} {% endblocktrans %}