Read the docs

Crocantickets

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Crocantickets records in CISA KEV

No Crocantickets vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-06299 CVE-2026-7176 · GHSA-24wv-pp5p-8868

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allo…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00234 Published 2026-10-01 No fix listed CWE-79
TI-2026-06298 CVE-2026-7175 · GHSA-635f-v4jh-h92p

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00234 Published 2026-10-01 No fix listed CWE-79
TI-2026-06297 CVE-2026-7174 · GHSA-g858-jcvh-5fpf

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00285 Published 2026-10-01 No fix listed CWE-79
Open these records in search →