← Back

Hi.events

hi.events

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Hi.events
hi.events
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2026-34455
1Hi.events
1Hi.events
Apr 15, 2026
Apr 1, 2026
8.7 HIGH· v4
8.8 HIGH· v3
N/A· v2
Hi.Events is an open-source event management and ticket selling platform. From version 0.8.0-beta.1 to before version 1.7.1-beta, multiple repository classes pass the user-supplied sort_by query parameter directly to Elo...Show more
Hi.Events is an open-source event management and ticket selling platform. From version 0.8.0-beta.1 to before version 1.7.1-beta, multiple repository classes pass the user-supplied sort_by query parameter directly to Eloquent's orderBy() without validation, enabling SQL injection. The application uses PostgreSQL which supports stacked queries. This issue has been patched in version 1.7.1-beta.Show less