Haxset

**Name of the Vulnerable Software and Affected Versions** pretix (affected versions not specified) **Description** Malicious HTML content can be injected into the page displayed when a redirection to an untrusted page occurs. Due to the presence of a Content-Security-Policy (a security layer that helps detect and mitigate certain types of attacks, including cross-site scripting), this issue is primarily exploitable for phishing purposes. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.