CVE-2026-7176
Last modified
CVE-2026-7176 is a medium-severity vulnerability rated 4.8/10 on the CVSS scale. CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the event..
Description
CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the event.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Crocantickets | Entradium | versions before 20260409151659 and 20260409153543. |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-7176?
How severe is CVE-2026-7176?
How do I fix CVE-2026-7176?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7170Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting t…4.8
- CVE-2026-7171Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting t…4.8
- CVE-2026-7172Stored Cross-Site Scripting (XSS) in TPVEnlanube affecting t…4.8
- CVE-2026-7173CVE-2026-7173: Cross-Site Scripting vulnerability in Entradi…4.8
- CVE-2026-7174CVE-2026-7174: Stored Cross-Site Scripting vulnerability in …4.8
- CVE-2026-7175CVE-2026-7175: the Business Name parameter in the /promoters…4.8
- CVE-2026-7177A security flaw has been discovered in ChatGPTNextWeb NextCh…7.3
- CVE-2026-7178A weakness has been identified in ChatGPTNextWeb NextChat up…7.3
- CVE-2026-7179A security vulnerability has been detected in OSPG binwalk u…5.3
- CVE-2026-71801An issue was discovered in s-pms SPMS-Server through v1.0. T…9.8
- CVE-2026-71802A stored Cross-Site Scripting (XSS) vulnerability exists in …5.4
- CVE-2026-71803money-pos 1.0 contains a stored Cross-Site Scripting (XSS) v…5.4
Are you affected by CVE-2026-7176?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST