What is GHSA-24wv-pp5p-8868?

GHSA-24wv-pp5p-8868 is a security advisory published by GitHub Security Advisories with Medium severity. CVE-2026-7176: the Help text and Title parameters in the endpoint /events/\u003cevent_name\u003e-...

Which CVE IDs does GHSA-24wv-pp5p-8868 cover?

GHSA-24wv-pp5p-8868 covers the following CVE IDs: CVE-2026-7176. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-24wv-pp5p-8868Medium

CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-...

Vendor

GitHub Security Advisories

Published

October 1, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-7176 →

📋 Description

CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated with ticket sales for an event, which allows for the injection of JavaScript that will execute on the public ticket purchase page for the event.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-7176
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-entradium-crocantickets
https://github.com/advisories/GHSA-24wv-pp5p-8868