https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:43:28 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-7172 <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7172: parameter &#39;Nombre Completo&#39; in the endpoint  &#39;/administrator/index.php?option=com_virtuemart&amp;page=admin.user_list&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7172: parameter &#39;Nombre Completo&#39; in the endpoint  &#39;/administrator/index.php?option=com_virtuemart&amp;page=admin.user_list&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-7172 https://vulnerability.circl.lu/vuln/ghsa-428v-q45m-cv5c <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7172: parameter &#39;Nombre Completo&#39; in the endpoint  &#39;/administrator/index.php?option=com_virtuemart&amp;page=admin.user_list&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> <p>Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting the following endpoint and parameter:</p> <p>* CVE-2026-7172: parameter &#39;Nombre Completo&#39; in the endpoint  &#39;/administrator/index.php?option=com_virtuemart&amp;page=admin.user_list&#39;.</p> <p>Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious code and execute it in users&#39; browsers without their consent.</p> https://vulnerability.circl.lu/vuln/ghsa-428v-q45m-cv5c