Executive brief
CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
Affected products
- Packagist ci4-cms-erp/ci4ms
Junglewise Threat Intelligence
CVE-2026-34569: CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-34569 · Severity: low · CVSS 3.1 · Published 2026-04-01
Technologies: ci4-cms-erp/ci4ms (Packagist). Vendors: Packagist.