Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: ci4ms Clear
ID Title
CVE-2026-39392 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39392)
cross-site scripting in ci4-cms-erp (CVE-2026-39392). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39393 Vulnerability in ci4-cms-erp (CVE-2026-39393)
vulnerability in ci4-cms-erp (CVE-2026-39393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39394 Vulnerability in csrf (CVE-2026-39394)
vulnerability in csrf (CVE-2026-39394). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39391 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39391)
cross-site scripting in ci4-cms-erp (CVE-2026-39391). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39389 Vulnerability in ci4-cms-erp (CVE-2026-39389)
vulnerability in ci4-cms-erp (CVE-2026-39389). Confidential information can be exposed externally. Mitigation: upgrade to `0.31.4.0` or later.
CVE-2026-39390 Cross-Site Scripting (XSS) in ci4-cms-erp (CVE-2026-39390)
cross-site scripting in ci4-cms-erp (CVE-2026-39390). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.31.4.0` or later.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →