https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 16:08:35 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-7171 <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7171: parameter &#39;Apellido 1&#39; in the endpoint  &#39;/administrator/index.php?page=admin.user_add&amp;user_id=45&amp;option=com_virtuemart&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7171: parameter &#39;Apellido 1&#39; in the endpoint  &#39;/administrator/index.php?page=admin.user_add&amp;user_id=45&amp;option=com_virtuemart&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-7171 https://vulnerability.circl.lu/vuln/ghsa-2jq2-728v-8wjw <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7171: parameter &#39;Apellido 1&#39; in the endpoint  &#39;/administrator/index.php?page=admin.user_add&amp;user_id=45&amp;option=com_virtuemart&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7171: parameter &#39;Apellido 1&#39; in the endpoint  &#39;/administrator/index.php?page=admin.user_add&amp;user_id=45&amp;option=com_virtuemart&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/ghsa-2jq2-728v-8wjw