CVE-2026-7172

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7172 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7172 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7172

A Stored Cross-Site Scripting (XSS) vulnerability exists in TPVEnlanube within the 'Nombre Completo' parameter of the endpoint /administrator/index.php?option=com_virtuemart&page=admin.user_list. An authenticated attacker can exploit this flaw to inject and execute malicious code in other users' ...

EUVD-2026-88200

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

PT-2026-99842

Name of the Vulnerable Software and Affected Versions TPVEnlanube affected versions not specified Description Stored Cross-Site Scripting XSS occurs when an authenticated attacker injects malicious code into the Nombre Completo parameter at the '/administrator/index.php?option=com...

CVE-2026-7172: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...