https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T05:55:37.716673+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-278951 EUVD-2026-278951 2026-10-22T05:55:37.719761+00:00 EUVD-2026-278951 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34565 fkie_cve-2026-34565 2026-10-22T05:55:37.719800+00:00

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when adding Posts to navigation menus through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding. These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS). This issue has been patched in version 0.31.0.0.

 https://cve.radiocsirt.org/vuln/ghsa-xgh5-w62m-8mpr GHSA-xgh5-w62m-8mpr — CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS 2026-10-22T05:55:37.719836+00:00

Affected: Packagist: ci4-cms-erp/ci4ms

## Summary ### **Vulnerability: Stored DOM XSS via Posts Added to Menu (Persistent Payload Injection)** - Stored Cross-Site Scripting via Unsafe Rendering of Post Entries in Menu Management

### Description The application fails to properly sanitize user-controlled input when **adding Posts to navigation menus** through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding.

These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS).

### Affected Functionality - Menu Management – Posts section - Adding posts to navigation menus - Menu storage and rendering logic

### Attack Scenario - An attacker creates or controls a post containing a malicious JavaScript payload. - The attacker adds the post to the menu using the **Posts** functionality in Menu Manager. - The application stores the menu entry without sanitization or encoding. - The payload persists and executes whenever the menu is rendered.

### Impact - Persistent Stored DOM XSS - Execution of arbitrary JavaScript in victims’ browsers - Privilege escalation in administrative contexts - Full administrator account takeover - Full account takeover across all roles - Full compromise of the entire application via global navigation execution

Endpoint: - `/backend/menu/`

## Steps To Reproduce (POC) 1. Navigate to Menu…