Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Crocantickets Clear all filters
TI-2026-06299 CVE-2026-7176 · GHSA-24wv-pp5p-8868

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allo…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00234 Published 2026-10-01 No fix listed CWE-79
TI-2026-06298 CVE-2026-7175 · GHSA-635f-v4jh-h92p

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00234 Published 2026-10-01 No fix listed CWE-79
TI-2026-06297 CVE-2026-7174 · GHSA-g858-jcvh-5fpf

Multiple vulnerabilities in Entradium by Crocantickets

Priority LOW 22

CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00285 Published 2026-10-01 No fix listed CWE-79