Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart'. Successful exploitation of this vulnerability co...
Product
TPVEnlanube Cloud Web application vulnerabilities
3 published CVES affecting TPVEnlanube Cloud Web application, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 3
- Critical
- 0
- High
- 0
- Medium
- 3
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest TPVEnlanube Cloud Web application CVEs
Newest publication first
-
MediumCVSS 4.8 EPSS 0.25%
-
MediumCVSS 4.8 EPSS 0.25%
Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=com_virtuemart&page=admin.user_list'. Successful exploitation of this vulnerability could a...
-
MediumCVSS 4.8 EPSS 0.25%
Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendor_store_name' in the endpoint '/administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID]'. Successful exploita...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.