ci4ms - Robuta Search

https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-25509/ CI4MS Vulnerable to User Email Enumeration via Password Reset Flow | GitLab Advisory Database (GLAD) CVE-2026-25509 CI4MS Vulnerable to User Email Enumeration via Password Reset Flow: Summary The authentication implementation in CI4MS is vulnerable to email... https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-34562/ CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for... system settings company information full platform account takeover https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-34989/ CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via... for all roles https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/GHSA-654x-9q7r-g966/ CI4MS Vulnerable to User Email Enumeration via Password Reset Flow | GitLab Advisory Database (GLAD) GHSA-654x-9q7r-g966 CI4MS Vulnerable to User Email Enumeration via Password Reset Flow: Summary The authentication implementation in CI4MS is vulnerable to... https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-39393/ CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass | GitLab... CVE-2026-39393 CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass: The install route guard in ci4ms relies solely on a... https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-41587/ CI4MS has Unrestricted PHP File Upload via Theme Installation that Leads to Authenticated Remote... CVE-2026-41587 CI4MS has Unrestricted PHP File Upload via Theme Installation that Leads to Authenticated Remote Code Execution: A theme upload feature allows... https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-35035/ CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for... company information https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-34558/ CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM... https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-39390/ CI4MS has stored XSS via srcdoc attribute bypass in Google Maps iframe setting | GitLab Advisory... CVE-2026-39390 CI4MS has stored XSS via srcdoc attribute bypass in Google Maps iframe setting: The Google Maps iframe setting (cMap field) in compInfosPost()... https://packagist.org/packages/ci4-cms-erp/ci4ms ci4-cms-erp/ci4ms - Packagist.org Modular CodeIgniter 4 CMS featuring RBAC admin, theming, blog/page management, elFinder media integration, and CLI tooling for rapid customization. cms erp packagist https://advisories.gitlab.com/composer/ci4-cms-erp/ci4ms/CVE-2026-34557/ CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored... for all roles