Kurz gesagt
- CVE-2026-35035 ist eine Schwachstelle (KRITISCH (CVSS 9.0)) in ci4-cms-erp/ci4ms, ci4ms (ci4-cms-erp).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.46%, höher als bei 39.5% aller Schwachstellen.
- Abhilfe: auf 0.31.2.0 oder neuer aktualisieren.
Description
An attacker can acheive Full Account Takeover & Privilege Escalation via Stored DOM Blind XSS on public-facing landing pages through the System Settings Company Information section which allows the injection of XSS payloads
NVD description
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to 0.31.2.0, the application fails to properly sanitize user-controlled input within System Settings – Company Information. Several administrative configuration fields accept attacker-controlled input that is stored server-side and later rendered without proper output encoding. These values are persisted in the database and rendered unsafely on public-facing pages only, such as the main landing page. There is no execution in the administrative dashboard—the vulnerability only impacts the public frontend. This vulnerability is fixed in 0.31.2.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free