pretalx pretalx

• CVE-2026-41426 Medium 6.1 pretalx: Email injection via unescaped user-controlled placeholders in pretalx mail templates 0.2%
• CVE-2026-41241 High 8.7 pretalx: Stored cross-site scripting in organiser search typeahead 0.2%