[ Vendor · 4 CVEs ]
Crocantickets
CVEs affecting Crocantickets published in the last 30 days, plus any Crocantickets CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-7176 | 1 Oct 2026 | CVSS 4.8 | Crocantickets EntradiumCVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating… | |
| CVE-2026-7173 | 1 Oct 2026 | CVSS 4.8 | Crocantickets EntradiumCVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to… | |
| CVE-2026-7174 | 1 Oct 2026 | CVSS 4.8 | Crocantickets EntradiumCVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the… | |
| CVE-2026-7175 | 1 Oct 2026 | CVSS 4.8 | Crocantickets EntradiumCVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the… |