Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-39392 |
|
Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39392)
cross-site scripting in ci4-cms-erp (CVE-2026-39392). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
|
| CVE-2026-39393 |
|
Vulnerability in ci4-cms-erp (CVE-2026-39393)
vulnerability in ci4-cms-erp (CVE-2026-39393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.31.4.0` or later.
|
| CVE-2026-39394 |
|
Vulnerability in csrf (CVE-2026-39394)
vulnerability in csrf (CVE-2026-39394). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.31.4.0` or later.
|
| CVE-2026-39391 |
|
Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39391)
cross-site scripting in ci4-cms-erp (CVE-2026-39391). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
|
| CVE-2026-39389 |
|
Vulnerability in ci4-cms-erp (CVE-2026-39389)
vulnerability in ci4-cms-erp (CVE-2026-39389). Confidential information can be exposed externally. Mitigation: upgrade to `0.31.4.0` or later.
|
| CVE-2026-39390 |
|
Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39390)
cross-site scripting in ci4-cms-erp (CVE-2026-39390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
|