Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.
CWE-80