Log in Start free

alfio-event

Products

ProductCVEsExploitedLatest
alf.io9–Sep 9, 2026
alfio-event/alf.io5–Apr 24, 2023

Exploited and recent CVEs

  • CVE-2026-50165 High 7.1 alf.io has Improper Access Control for Organization Owners that Exposes System Secrets 0.4%
  • CVE-2026-41412 Medium 4.9 alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Script 0.3%
  • CVE-2026-35482 High 8.0 alf.io has an Authenticated RCE via Extension Script Sandbox Escape 0.3%
  • CVE-2024-45300 High 7.5 Bypassing promo code limitations with race conditions 0.4%
  • CVE-2024-45299 Medium 6.5 alf.io's preloaded data as json is not escaped correctly 0.7%
  • CVE-2024-25634 High 7.2 IDOR make user can read e-mail log sent by other events 0.7%
  • CVE-2024-25635 High 8.8 IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERS 0.7%
  • CVE-2024-25627 Low 3.5 Cross-Site Scripting (XSS) via File Upload in Alf.io 0.4%
  • CVE-2024-25628 High 7.6 Insufficient Session Expiration in alf.io 0.4%
  • CVE-2023-2258 High 8.8 Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io 0.9%
  • CVE-2023-2260 High 8.8 Authorization Bypass Through User-Controlled Key in alfio-event/alf.io 0.9%
  • CVE-2023-2259 Critical 9.1 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io 1.1%
  • CVE-2023-0300 Low 3.5 Cross-site Scripting (XSS) - Reflected in alfio-event/alf.io 0.5%
  • CVE-2023-0301 Medium 4.3 Cross-site Scripting (XSS) - Stored in alfio-event/alf.io 0.5%