Executive brief
CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS
Affected products
- Packagist ci4-cms-erp/ci4ms
Junglewise Threat Intelligence
CVE-2026-41201: CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS
CVE-2026-41201 · Severity: low · CVSS 3.1 · Published 2026-04-22
Technologies: ci4-cms-erp/ci4ms (Packagist). Vendors: Packagist.