Vulnerabilities > Vollstart

DATE CVE VULNERABILITY TITLE RISK
2024-11-18 CVE-2024-52427 Code Injection vulnerability in Vollstart Event Tickets With Ticket Scanner
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Server Side Include (SSI) Injection.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.11.
network
low complexity
vollstart CWE-94
8.8
2024-06-04 CVE-2024-35652 Cross-site Scripting vulnerability in Vollstart Event Tickets With Ticket Scanner
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Saso Nikolov Event Tickets with Ticket Scanner allows Reflected XSS.This issue affects Event Tickets with Ticket Scanner: from n/a through 2.3.1.
network
low complexity
vollstart CWE-79
6.1