Read the docs

TPVEnlanube

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

TPVEnlanube records in CISA KEV

No TPVEnlanube vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-06295 CVE-2026-7172 · GHSA-428v-q45m-cv5c

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.use…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79
TI-2026-06294 CVE-2026-7171 · GHSA-2jq2-728v-8wjw

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79
TI-2026-06293 CVE-2026-7170 · GHSA-h7w4-9999-mvp8

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7170: parameter 'vendor_store_name' in the endpoint '/administrator/index.php?pshop_mode=admin&page=store.store_…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79
Open these records in search →