CVE-2026-34562 in ci4ms
Zusammenfassung (Englisch)
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input within System Settings – Company Information. Several administrative configuration fields accept attacker-controlled input that is stored server-side and later rendered without proper output encoding. This issue has been patched in version 0.31.0.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Zuständig
GitHub_M
Reservieren
30.03.2026
Veröffentlichung
02.04.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 354808 | ci4-cms-erp ci4ms Setting Cross Site Scripting | 79 | Nicht definiert | Offizieller Fix | CVE-2026-34562 |