Skip to content
OpenAdvisories

Vendor

Crocantickets

4 known vulnerabilities.

Products

Entradium 4
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-7176

    Multiple vulnerabilities in Entradium by Crocantickets

    CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that…

    Crocantickets Entradium
  • Medium 4.8
    CVE-2026-7175

    Multiple vulnerabilities in Entradium by Crocantickets

    CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;

    Crocantickets Entradium
  • Medium 4.8
    CVE-2026-7174

    Multiple vulnerabilities in Entradium by Crocantickets

    CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discount_wizard/discount_config during the process of creating discounts assigned to an event. This …

    Crocantickets Entradium
  • Medium 4.8
    CVE-2026-7173

    Multiple vulnerabilities in Entradium by Crocantickets

    CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to the victim and steal their session data. * (Stored XSS) The City parameter in…

    Crocantickets Entradium