CVE-2026-45138

CI4MS is a CodeIgniter 4-based content management system skeleton. Prior to version 0.31.9.0, the custom "htmlpurify" validation rule used to sanitize blog post bodies relies on by-reference mutation "?string &$str", but CodeIgniter 4's validator passes a local copy of the value, so the sanitized...