Threat database

CVE-2026-7171 is a stored Cross-Site Scripting (XSS) vulnerability in the TPVEnlanube Cloud Web application. It affects the 'Apellido 1' parameter in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart'. An authenticated attacker could exploit this flaw to inject malicious scripts that execute in the browsers of other users. The vulnerability has a medium severity rating with a CVSS score of 4.8. No patch or remediation information is currently provided.

CVE-2026-7172 is a stored Cross-Site Scripting (XSS) vulnerability in the TPVEnlanube Cloud Web application. It affects the 'Nombre Completo' parameter in the '/administrator/index.php?option=com_virtuemart&page=admin.user_list' endpoint. An authenticated attacker could exploit this flaw to inject malicious scripts that execute in other users' browsers. The vulnerability has a medium severity with a CVSS 4.8 score. No affected versions or patch information are provided.

CVE-2026-7170 is a stored cross-site scripting (XSS) vulnerability in the TPVEnlanube Cloud Web application. It affects the 'vendor_store_name' parameter in the '/administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID]' endpoint. An authenticated attacker could exploit this flaw to inject malicious scripts that execute in users' browsers. The vulnerability has a medium severity rating with a CVSS 4.8 score. No patch or remediation information is currently provided.