Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Crocantickets | Entradium | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
The vulnerabilities have been fixed by Crocantickets team in versions 20260409151659 y 20260409153543.
Tracking
Sign in to view the affected projects.
No advisories yet.
Thu, 01 Oct 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the event. | |
| Title | Multiple vulnerabilities in Entradium by Crocantickets | |
| First Time appeared |
Crocantickets
Crocantickets entradium |
|
| Weaknesses | CWE-79 | |
| CPEs | cpe:2.3:a:crocantickets:entradium:versions_before_20260409151659_and_20260409153543.:*:*:*:*:*:*:* | |
| Vendors & Products |
Crocantickets
Crocantickets entradium |
|
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published:
Updated: 2026-10-01T09:57:04.653Z
Reserved: 2026-04-27T07:58:56.358Z
Link: CVE-2026-7176
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-10-01T10:17:17.100
Modified: 2026-10-01T10:17:17.100
Link: CVE-2026-7176
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-01T12:00:06Z
-
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')