Lucene search
+L

1 matches found

OSV
OSV
added 2026/04/01 9:21 p.m.10 views

CVE-2026-34560 CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application renders user-controlled input unsafely within the logs interface. If any stored XSS payload exists within logged...

9.1CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder