Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when creating or editing blog posts. An attacker can inject a malicious JavaScript payload into blog post content, which is then stored server-side. This stored payload is later rendered unsafely in multiple application views without proper output encoding, leading to stored cross-site scripting (XSS). This issue has been patched in version 0.31.0.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
A stored DOM XSS vulnerability (CVE-2026-34568) in `CI4MS` Blogs Posts allows full account takeover & privilege escalation. Assess your exposure. #XSS #infosec #security https://www.pulsepatch.io/posts/cve-2026-34568-ci4ms-stored-dom-xss
Post summary
The post announces that CI4MS Blogs Posts have a stored DOM XSS that can lead to full account takeover and privilege escalation, urging users to assess exposure.
[CVE-2026-34568: CRITICAL] CI4MS, a CodeIgniter 4-based CMS, had a security flaw allowing XSS attacks in blog posts. Make sure to update to version 0.31.0.0 to patch this vulnerability. #cybersecurity#cve,CVE-2026-34568,#cybersecurity https://cvefind.com/CVE-2026-34568
Post summary
The tweet discloses a critical XSS flaw in CI4MS CMS (CVE‑2026‑34568) and advises updating to version 0.31.0.0 to patch it.
CVE-2026-34568 CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.… https://www.cve.org/CVERecord?id=CVE-2026-34568
Post summary
The snippet mentions CVE-2026-34568 for the CI4MS CMS but provides no further technical, exploit, or mitigation details.
🔴 CVE-2026-34568 - Critical CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fa... https://www.thehackerwire.com/vulnerability/CVE-2026-34568/ https://t.co/ZtVX4BhpzC
Post summary
The post announces CVE‑2026‑34568 as a critical vulnerability in the CI4MS CodeIgniter CMS skeleton, but provides no proof‑of‑concept, exploit details, patches, or technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | ci4-cms-erp | ci4ms | - | - | - |