CVE-2026-34561

CI4MS is a CodeIgniter 4-based CMS skeleton. Before version 0.31.0.0, it fails to sanitize user input in System Settings – Social Media Management; fields such as Social Media and Social Media Link accept attacker-controlled data stored server-side and rendered without proper output encoding. Thi...

CVE-2026-33061

CVE-2026-33061 affects Jexactyl (previously named Exactyl), a configurable game management panel and billing system. The issue arises from injecting server-side objects into client-side JavaScript via resources/views/templates/wrapper.blade.php, where unescaped {!! json_encode(...) !!} is used wi...