CVE-2026-34566

creationtimestamp| type| source ---|---|--- 2026-04-01 22:06:28+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-458r-h248-29c5 2026-04-01 22:31:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mihqlqrjev23 2026-04-01 23:27:52+00:00| seen|...

CVE-2026-34566

CVE-2026-34566 affects CI4MS, a CodeIgniter 4-based CMS skeleton. Prior to version 0.31.0.0, user-controlled input in Page Management is not properly sanitized, allowing attacker-controlled JavaScript to be stored server-side and later rendered without output encoding in admin page lists and publ...