Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: TPVEnlanube Clear all filters
TI-2026-06294 CVE-2026-7171 · GHSA-2jq2-728v-8wjw

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79
TI-2026-06295 CVE-2026-7172 · GHSA-428v-q45m-cv5c

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.use…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79
TI-2026-06293 CVE-2026-7170 · GHSA-h7w4-9999-mvp8

Cross-site scripting in TPVEnlanube Cloud Web application

Priority LOW 22

Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: * CVE-2026-7170: parameter 'vendor_store_name' in the endpoint '/administrator/index.php?pshop_mode=admin&page=store.store_…

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00251 Published 2026-09-28 No fix listed CWE-79