HHiEventsDev

Products

Exploited and recent CVEs

• CVE-2026-76838 High 8.5 Hi.Events before 1.11.1-beta Server-Side Request Forgery via Unvalidated Webhook Redirects 0.4%
• CVE-2026-60119 Medium 5.4 Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection 0.3%
• CVE-2026-60118 Medium 5.3 Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint 0.3%
• CVE-2026-57960 Medium 6.5 Hi.Events 1.9.0 - Unauthenticated Attendee PII Exposure via Check-in List short_id 0.4%
• CVE-2026-57959 Medium 5.9 Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition 0.3%
• CVE-2026-34455 High 8.7 Hi.Events: SQL Injection via Unvalidated sort_by Query Parameter in Multiple Repository Classes 0.4%