Security: ci4-cms-erp/ci4ms
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-rpjr-985c-qhvm published
Mar 30, 2026 by bertugfahriozerCritical -
Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-v77r-xg3p-75g7 published
Mar 30, 2026 by bertugfahriozerCritical -
Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-4333-387x-w245 published
Mar 31, 2026 by bertugfahriozerCritical -
Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-r4v5-rwr2-q7r4 published
Mar 31, 2026 by bertugfahriozerCritical -
System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-66m2-v9v9-95c3 published
Mar 30, 2026 by bertugfahriozerCritical -
System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-gcfj-cf7j-vwgj published
Mar 31, 2026 by bertugfahriozerCritical -
System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-v897-c6vq-6cr3 published
Mar 31, 2026 by bertugfahriozerCritical -
Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSSGHSA-85m8-g393-jcxf published
Mar 31, 2026 by bertugfahriozerCritical -
Account Deactivation Module Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)GHSA-8fq3-c5w3-pj3q published
Mar 31, 2026 by bertugfahriozerHigh -
Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSSGHSA-g4pp-fhgf-8653 published
Mar 31, 2026 by bertugfahriozerCritical