agentprime: alfio-event-alf-ioEvery new CVE for alfio-event-alf-io.https://agentprime.io/CVE-2026-50165: alf.io has Improper Access Control for Organization Owners that Exposes System Secretshttps://agentprime.io/advisories/CVE-2026-50165/https://agentprime.io/advisories/CVE-2026-50165/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 09 Sep 2026 20:25:55 GMTCVECVE-2026-41412: alf.io vulnerable to Arbitrary File Read and Exfil via simpleHttpClient Extension Scripthttps://agentprime.io/advisories/CVE-2026-41412/https://agentprime.io/advisories/CVE-2026-41412/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 22:51:36 GMTCVECVE-2026-35482: alf.io has an Authenticated RCE via Extension Script Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-35482/https://agentprime.io/advisories/CVE-2026-35482/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 02 Jun 2026 22:50:40 GMTCVECVE-2024-45300: Bypassing promo code limitations with race conditionshttps://agentprime.io/advisories/CVE-2024-45300/https://agentprime.io/advisories/CVE-2024-45300/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Sep 2024 13:02:21 GMTCVECVE-2024-45299: alf.io's preloaded data as json is not escaped correctlyhttps://agentprime.io/advisories/CVE-2024-45299/https://agentprime.io/advisories/CVE-2024-45299/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Sep 2024 13:00:47 GMTCVECVE-2024-25634: IDOR make user can read e-mail log sent by other eventshttps://agentprime.io/advisories/CVE-2024-25634/https://agentprime.io/advisories/CVE-2024-25634/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Feb 2024 19:53:52 GMTCVECVE-2024-25635: IDOR Vulnerability: Allowing Organization Owner to view the other Organizations API KEY and USERShttps://agentprime.io/advisories/CVE-2024-25635/https://agentprime.io/advisories/CVE-2024-25635/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Feb 2024 19:48:10 GMTCVECVE-2024-25627: Cross-Site Scripting (XSS) via File Upload in Alf.iohttps://agentprime.io/advisories/CVE-2024-25627/https://agentprime.io/advisories/CVE-2024-25627/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Feb 2024 20:27:58 GMTCVECVE-2024-25628: Insufficient Session Expiration in alf.iohttps://agentprime.io/advisories/CVE-2024-25628/https://agentprime.io/advisories/CVE-2024-25628/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Feb 2024 20:23:44 GMTCVECVE-2023-2260: Authorization Bypass Through User-Controlled Key in alfio-event/alf.iohttps://agentprime.io/advisories/CVE-2023-2260/https://agentprime.io/advisories/CVE-2023-2260/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 00:00:00 GMTCVECVE-2023-2259: Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.iohttps://agentprime.io/advisories/CVE-2023-2259/https://agentprime.io/advisories/CVE-2023-2259/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 00:00:00 GMTCVEcriticalCVE-2023-2258: Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.iohttps://agentprime.io/advisories/CVE-2023-2258/https://agentprime.io/advisories/CVE-2023-2258/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Apr 2023 00:00:00 GMTCVECVE-2023-0301: Cross-site Scripting (XSS) - Stored in alfio-event/alf.iohttps://agentprime.io/advisories/CVE-2023-0301/https://agentprime.io/advisories/CVE-2023-0301/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Jan 2023 00:00:00 GMTCVECVE-2023-0300: Cross-site Scripting (XSS) - Reflected in alfio-event/alf.iohttps://agentprime.io/advisories/CVE-2023-0300/https://agentprime.io/advisories/CVE-2023-0300/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 14 Jan 2023 00:00:00 GMTCVE