https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 08:39:48 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-278951 EUVD-2026-278951 https://cve.radiocsirt.org/vuln/euvd-2026-278951 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34565 <p>CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when adding Posts to navigation menus through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding. These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS). This issue has been patched in version 0.31.0.0.</p> <p>CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.0.0, the application fails to properly sanitize user-controlled input when adding Posts to navigation menus through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding. These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS). This issue has been patched in version 0.31.0.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34565 https://cve.radiocsirt.org/vuln/ghsa-xgh5-w62m-8mpr <p><strong>Affected:</strong> Packagist: ci4-cms-erp/ci4ms</p> <p>## Summary ### **Vulnerability: Stored DOM XSS via Posts Added to Menu (Persistent Payload Injection)** - Stored Cross-Site Scripting via Unsafe Rendering of Post Entries in Menu Management</p> <p>### Description The application fails to properly sanitize user-controlled input when **adding Posts to navigation menus** through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding.</p> <p>These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS).</p> <p>### Affected Functionality - Menu Management – Posts section - Adding posts to navigation menus - Menu storage and rendering logic</p> <p>### Attack Scenario - An attacker creates or controls a post containing a malicious JavaScript payload. - The attacker adds the post to the menu using the **Posts** functionality in Menu Manager. - The application stores the menu entry without sanitization or encoding. - The payload persists and executes whenever the menu is rendered.</p> <p>### Impact - Persistent Stored DOM XSS - Execution of arbitrary JavaScript in victims’ browsers - Privilege escalation in administrative contexts - Full administrator account takeover - Full account takeover across all roles - Full compromise of the entire application via global navigation execution</p> <p>Endpoint: - `/backend/menu/`</p> <p>## Steps To Reproduce (POC) 1. Navigate to Menu…</p> <p><strong>Affected:</strong> Packagist: ci4-cms-erp/ci4ms</p> <p>## Summary ### **Vulnerability: Stored DOM XSS via Posts Added to Menu (Persistent Payload Injection)** - Stored Cross-Site Scripting via Unsafe Rendering of Post Entries in Menu Management</p> <p>### Description The application fails to properly sanitize user-controlled input when **adding Posts to navigation menus** through the Menu Management functionality. Post-related data selected via the Posts section is stored server-side and rendered without proper output encoding.</p> <p>These stored values are later rendered unsafely within administrative dashboards and public-facing navigation menus, resulting in stored DOM-based cross-site scripting (XSS).</p> <p>### Affected Functionality - Menu Management – Posts section - Adding posts to navigation menus - Menu storage and rendering logic</p> <p>### Attack Scenario - An attacker creates or controls a post containing a malicious JavaScript payload. - The attacker adds the post to the menu using the **Posts** functionality in Menu Manager. - The application stores the menu entry without sanitization or encoding. - The payload persists and executes whenever the menu is rendered.</p> <p>### Impact - Persistent Stored DOM XSS - Execution of arbitrary JavaScript in victims’ browsers - Privilege escalation in administrative contexts - Full administrator account takeover - Full account takeover across all roles - Full compromise of the entire application via global navigation execution</p> <p>Endpoint: - `/backend/menu/`</p> <p>## Steps To Reproduce (POC) 1. Navigate to Menu…</p> https://cve.radiocsirt.org/vuln/ghsa-xgh5-w62m-8mpr