Read the docs

ci4-cms-erp

Records36All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical20CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ci4-cms-erp records in CISA KEV

No ci4-cms-erp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ci4ms 27 records HIGH

Records

27 records in Ci4ms · all components

TI-2026-26819 CVE-2026-34570 · GHSA-4vxv-4xq4-p84h

Improper access control in ci4-cms-erp ci4ms

Priority HIGH 79

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00511 Published 2026-04-01 Fixed in 0.31.0.0 CWE-1254
TI-2026-27211 CVE-2026-34989 · GHSA-vr2g-rhm5-q4jr

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 76

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00302 Published 2026-04-06 Fixed in 31.0.0.0 CWE-79
TI-2026-26820 CVE-2026-34571 · GHSA-fc4p-p49v-r948

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 76

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1CRITICAL 10.0 Network Low privileges No interaction EPSS 0.004 Published 2026-04-01 Fixed in 0.31.0.0 CWE-79
TI-2026-27238 CVE-2026-35035 · GHSA-5ghq-42rg-769x

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 74

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00463 Published 2026-04-06 Fixed in 0.31.2.0 CWE-79
TI-2026-26821 CVE-2026-34572 · GHSA-8fq3-c5w3-pj3q

Improper access control in ci4-cms-erp ci4ms

Priority HIGH 73

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00511 Published 2026-04-01 Fixed in 0.31.0.0 CWE-1254
TI-2026-26811 CVE-2026-34562 · GHSA-v897-c6vq-6cr3

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 72

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00279 Published 2026-04-01 Fixed in 0.31.0.0 CWE-79
TI-2026-26810 CVE-2026-34561 · GHSA-gcfj-cf7j-vwgj

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 70

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1HIGH 8.4 Network High privileges User interaction EPSS 0.00233 Published 2026-04-01 Fixed in 0.31.0.0 CWE-79
TI-2026-21985 CVE-2026-27599 · GHSA-66m2-v9v9-95c3

Cross-site scripting in ci4-cms-erp ci4ms

Priority HIGH 65

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00372 Published 2026-03-30 Fixed in 0.31.0.0 CWE-79
TI-2026-20619 CVE-2026-25509 · GHSA-654x-9q7r-g966

CI4MS Vulnerable to User Email Enumeration via Password Reset Flow

Priority MEDIUM 63

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00387 Published 2026-02-03 Fixed in 0.28.5.0 CWE-204
Load more
Open these records in search →