Vulners
Lucene search
2 matches found
CVE-2026-57960
Hi.Events through 1.9.0 public check-in list endpoints use shortid as sole access control, allowing unauthenticated access to retrieve full attendee lists including emails and personal information. Attackers with knowledge of the shortid can call GET /api/public/check-in-lists/shortid/attendees t...
8.3CVSS
Exploits0References3
CVE-2026-57960
Hi.Events
8.3CVSS5.8AI score
Exploits0References3
20