CVE-2026-34989 CI4MS affected by Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name e.g., full name / username. An...

CVE-2026-34989

CVE-2026-34989 affects the CI4MS CMS skeleton (CodeIgniter 4-based). The issue is stored XSS triggered by unsanitized input in the profile name field (full name/username). The payload is stored server-side and later rendered without proper encoding across multiple views, enabling persistent XSS. ...

CVE-2026-34989 CI4MS affected by Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name e.g., full name / username. An...

CVE-2026-34989 CI4MS affected by Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 31.0.0.0, the application fails to properly sanitize user-controlled input when users update their profile name e.g., full name / username. An...

CVE-2026-21382

creationtimestamp| type| source ---|---|--- 2026-04-06 16:24:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitogzqoza2p 2026-04-06 17:32:33+00:00| seen| Telegram/mCOSTqPiKnBsCJ7wgUXnJ9sN78eybUSXsSSUkGvS3qtdJ4k...

CVE-2026-4181

creationtimestamp| type| source ---|---|--- 2026-04-06 15:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mitktw2na22u...

CVE-2026-1668

creationtimestamp| type| source ---|---|--- 2026-04-06 15:00:07+00:00| published-proof-of-concept| Telegram/ZajfVU0NVHMB2Muj4M-mvXlhnMSYm4sTiRiw7Ql6Q5T1ODA 2026-04-07 06:08:44+00:00| seen| https://bsky.app/profile/news.karthihegde.dev/post/3miv4isvlxc26 2026-04-07 06:20:04+00:00| seen|...

CVE-2026-5641

creationtimestamp| type| source ---|---|--- 2026-04-06 14:36:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitiftyufy2s...

CVE-2026-5644

creationtimestamp| type| source ---|---|--- 2026-04-06 14:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitheeiass2i...

CVE-2026-5673

creationtimestamp| type| source ---|---|--- 2026-04-06 14:03:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitgkbcqxj2n...

CVE-2026-5659

creationtimestamp| type| source ---|---|--- 2026-04-06 14:01:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitghummpj2t...

CVE-2026-39370

creationtimestamp| type| source ---|---|--- 2026-04-06 12:49:09+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-cmcr-q4jf-p6q9 2026-04-07 20:31:04+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwmoiec4h2g 2026-04-07 21:22:19+00:00| seen|...

CVE-2026-39368

creationtimestamp| type| source ---|---|--- 2026-04-06 12:41:08+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-q4x6-6mm2-crg9 2026-04-07 20:25:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miwmexmsb423...

CVE-2026-31410

creationtimestamp| type| source ---|---|--- 2026-04-06 10:07:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3misze75pzi2g...

CVE-2026-5632

creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:18:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miszz555og2t...

CVE-2026-5634

creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:53:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit3wofa3y27...

CVE-2026-5633

creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:25:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2ei7eqg2o...

CVE-2024-47637

creationtimestamp| type| source ---|---|--- 2026-04-06 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3misvmlenyp2f...

CVE-2026-5623

creationtimestamp| type| source ---|---|--- 2026-04-06 06:08:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mislyqxxes2d...

CVE-2019-25704

creationtimestamp| type| source ---|---|--- 2026-04-06 00:11:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miry2g55jk27 2026-04-08 00:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3miwyetald32c...