Lucene search
+L

10 matches found

Cvelist
Cvelist
added 2026/04/01 9:20 p.m.23 views

CVE-2026-34559 CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when creating or editing blog tags. An attacker can inject a...

9.1CVSS0.00324EPSS
SaveExploits1References2
Rows per page
Query Builder