# cve.now: Ci4-cms-erp

The newest entries naming Ci4-cms-erp as an affected vendor (up to 200), of 36 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-45270](https://cve.now/CVE-2026-45270.md): CI4MS: Stored XSS in Pages Module Content via Broken html\_purify Validation Rule (CVSS 8.7)
- [CVE-2026-45139](https://cve.now/CVE-2026-45139.md): CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations (CVSS 6.5)
- [CVE-2026-45138](https://cve.now/CVE-2026-45138.md): CI4MS: Stored XSS in Blog Content via Broken \`html\_purify\` Validation Rule (CVSS 5.4)
- [CVE-2026-41891](https://cve.now/CVE-2026-41891.md): CI4MS: Deactivated User Session Bypass (active=0) (CVSS 5.3)
- [CVE-2026-41890](https://cve.now/CVE-2026-41890.md): CI4MS: Arbitrary Database Table Drop via Theme deleteProcess (CVSS 6.9)
- [CVE-2026-41203](https://cve.now/CVE-2026-41203.md): ci4ms Theme::upload is vulnerable to Zip Slip leading to RCE (CVSS 9.4)
- [CVE-2026-41202](https://cve.now/CVE-2026-41202.md): ci4ms Backup::restore is vulnerable to Zip Slip leading to RCE (CVSS 9.4)
- [CVE-2026-41201](https://cve.now/CVE-2026-41201.md): CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS Version 2 (CVSS 9.1)
- [CVE-2026-41587](https://cve.now/CVE-2026-41587.md): CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution (CVSS 8.6)
- [CVE-2026-39394](https://cve.now/CVE-2026-39394.md): CI4MS has an .env CRLF Injection via Unvalidated \`host\` Parameter in Install Controller (CVSS 8.1)
- [CVE-2026-39393](https://cve.now/CVE-2026-39393.md): Post-Installation Re-entry via Cache-Dependent Install Guard Bypass in ci4ms (CVSS 8.1)
- [CVE-2026-39392](https://cve.now/CVE-2026-39392.md): CI4MS has Stored XSS in Pages Content Due to Missing html\_purify Sanitization (CVSS 5.5)
- [CVE-2026-39391](https://cve.now/CVE-2026-39391.md): CI4MS has Stored XSS via Unescaped Blacklist Note in Admin User List (CVSS 4.8)
- [CVE-2026-39390](https://cve.now/CVE-2026-39390.md): CI4MS has Stored XSS via srcdoc attribute bypass in Google Maps iframe setting (CVSS 5.5)
- [CVE-2026-39389](https://cve.now/CVE-2026-39389.md): CI4MS has a Hidden Items Authorization Bypass in Fileeditor Allows Reading Secrets and Writing Protected Files (CVSS 6.7)
- [CVE-2026-35035](https://cve.now/CVE-2026-35035.md): CI4MS Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS (CVSS 7.2)
- [CVE-2026-34989](https://cve.now/CVE-2026-34989.md): CI4MS affected by Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.4)
- [CVE-2026-34572](https://cve.now/CVE-2026-34572.md): CI4MS: Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8)
- [CVE-2026-34571](https://cve.now/CVE-2026-34571.md): CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise (CVSS 10.0)
- [CVE-2026-34570](https://cve.now/CVE-2026-34570.md): CI4MS: Account Deletion Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) (CVSS 8.8)
- [CVE-2026-34569](https://cve.now/CVE-2026-34569.md): CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 10.0)
- [CVE-2026-34568](https://cve.now/CVE-2026-34568.md): CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34567](https://cve.now/CVE-2026-34567.md): CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34566](https://cve.now/CVE-2026-34566.md): CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34565](https://cve.now/CVE-2026-34565.md): CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34564](https://cve.now/CVE-2026-34564.md): CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34563](https://cve.now/CVE-2026-34563.md): CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS (CVSS 9.1)
- [CVE-2026-34562](https://cve.now/CVE-2026-34562.md): CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7)
- [CVE-2026-34561](https://cve.now/CVE-2026-34561.md): CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7)
- [CVE-2026-34560](https://cve.now/CVE-2026-34560.md): CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34559](https://cve.now/CVE-2026-34559.md): CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34558](https://cve.now/CVE-2026-34558.md): CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-34557](https://cve.now/CVE-2026-34557.md): CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 9.1)
- [CVE-2026-27599](https://cve.now/CVE-2026-27599.md): CI4MS: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS (CVSS 4.7)
- [CVE-2026-25510](https://cve.now/CVE-2026-25510.md): CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor (CVSS 10.0)
- [CVE-2026-25509](https://cve.now/CVE-2026-25509.md): CI4MS Vulnerable to User Email Enumeration via Password Reset Flow (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/ci4-cms-erp
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.