VYPR

ticket sales chart PDF export functionality

by Wegow

CVEs (1)

  • CVE-2026-101300HigOct 16, 2026
    risk 0.46cvss —epss —

    Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can manipulate the parameter of the POST request generated by selecting Download PDF. The content…