Executive brief
CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
Affected products
- Packagist ci4-cms-erp/ci4ms
Junglewise Threat Intelligence
CVE-2026-34989: CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-34989 · Severity: low · CVSS 3.1 · Published 2026-04-03
Technologies: ci4-cms-erp/ci4ms (Packagist). Vendors: Packagist.