CVE-2026-34562 in ci4ms
요약 (영어)
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input within System Settings – Company Information. Several administrative configuration fields accept attacker-controlled input that is stored server-side and later rendered without proper output encoding. This issue has been patched in version 0.31.0.0.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
책임이 있는
GitHub_M
예약하다
2026. 03. 30.
공개
2026. 04. 02.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 354808 | ci4-cms-erp ci4ms Setting 크로스 사이트 스크립팅 | 79 | 정의되지 않음 | 공식 수정 | CVE-2026-34562 |