https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 18:55:16 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-7170 <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7170: parameter &#39;vendor_store_name&#39; in the endpoint  &#39;/administrator/index.php?pshop_mode=admin&amp;page=store.store_add&amp;option=com_virtuemart&amp;vendor_id=[ID]&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7170: parameter &#39;vendor_store_name&#39; in the endpoint  &#39;/administrator/index.php?pshop_mode=admin&amp;page=store.store_add&amp;option=com_virtuemart&amp;vendor_id=[ID]&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-7170 https://vulnerability.circl.lu/vuln/ghsa-h7w4-9999-mvp8 <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7170: parameter &#39;vendor_store_name&#39; in the endpoint  &#39;/administrator/index.php?pshop_mode=admin&amp;page=store.store_add&amp;option=com_virtuemart&amp;vendor_id=[ID]&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7170: parameter &#39;vendor_store_name&#39; in the endpoint  &#39;/administrator/index.php?pshop_mode=admin&amp;page=store.store_add&amp;option=com_virtuemart&amp;vendor_id=[ID]&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/ghsa-h7w4-9999-mvp8