CVE-2026-7171

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

CVE-2026-7170

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...

CVE-2026-7172

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7171 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

CVE-2026-7171

A Stored Cross-Site Scripting (XSS) vulnerability exists in TPVEnlanube due to insufficient input validation of the 'Apellido 1' parameter at the '/administrator/index.php?page=admin.user_add&user_id=45&option=com_virtuemart' endpoint. An authenticated attacker can inject and execute malicious co...

EUVD-2026-88201

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

CVE-2026-7171 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

CVE-2026-7172 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7172

A Stored Cross-Site Scripting (XSS) vulnerability exists in TPVEnlanube within the 'Nombre Completo' parameter of the endpoint /administrator/index.php?option=com_virtuemart&page=admin.user_list. An authenticated attacker can exploit this flaw to inject and execute malicious code in other users' ...

EUVD-2026-88200

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7172 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7170 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...

CVE-2026-7170

The software TPVEnlanube is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The issue exists in the vendor_store_name parameter of the /administrator/index.php?pshop_mode=admin&page=store.store_add&option=com_virtuemart&vendor_id=[ID] endpoint. An authenticated attacker can exploit this t...

CVE-2026-7170 Stored Cross-Site Scripting (XSS) in TPVEnlanube

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...

EUVD-2026-88199

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7170: parameter 'vendorstorename' in the endpoint '/administrator/index.php?pshopmode=admin&page=store.storeadd&option=comvirtuemart&vendorid=ID'. Successful exploitation of this vulnerability...

PT-2026-99842

Name of the Vulnerable Software and Affected Versions TPVEnlanube affected versions not specified Description Stored Cross-Site Scripting XSS occurs when an authenticated attacker injects malicious code into the Nombre Completo parameter at the '/administrator/index.php?option=com...

PT-2026-99840

Name of the Vulnerable Software and Affected Versions TPVEnlanube affected versions not specified Description Stored Cross-Site Scripting XSS occurs when an authenticated attacker injects malicious code into the vendor store name parameter at the '/administrator/index.php?pshop...

CVE-2026-7172: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7172: parameter 'Nombre Completo' in the endpoint '/administrator/index.php?option=comvirtuemart&page=admin.userlist'. Successful exploitation of this vulnerability could allow an authenticated...

CVE-2026-7171: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting XSS in TPVEnlanube affecting the following endpoint and parameter: CVE-2026-7171: parameter 'Apellido 1' in the endpoint '/administrator/index.php?page=admin.useradd&userid=45&option=comvirtuemart'. Successful exploitation of this vulnerability could allow an...

PT-2026-99841

Name of the Vulnerable Software and Affected Versions TPVEnlanube affected versions not specified Description An authenticated attacker can perform Stored Cross-Site Scripting XSS, which occurs when a malicious script is permanently stored on the target server. This allows the execution of...