CVE-2026-35035 — Vulnerability in ci4-cms-erp/ci4ms — CVE Details

CRITICAL

CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

Published April 6, 2026Updated May 5, 2026Source: osv

Summary

An attacker can acheive Full Account Takeover & Privilege Escalation via Stored DOM Blind XSS on public-facing landing pages through the System Settings Company Information section which allows the injection of XSS payloads

Advisory Timeline

First published April 6, 2026 (189 days ago).
Last revised May 5, 2026 — 29 days after initial publication.

Remediation

Upgrade to the fixed version using your package manager.

Composer

Update ci4-cms-erp/ci4ms to 0.31.2.0 or later

composer require "ci4-cms-erp/ci4ms:^0.31.2.0"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

Affects 1 ecosystem: packagist (1).

Package	Ecosystem	Affected	Fixed In
ci4-cms-erp/ci4ms	packagist	0.21.0, 0.21.1, 0.21.2, 0.21.3 (+45 more)	0.31.2.0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CWE-79
Cross-site Scripting (XSS)MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.1 score means for each attack dimension.

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2026-35035?: CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.1/10).
How do I check if my project is affected by CVE-2026-35035?: CVE-2026-35035 affects ci4-cms-erp/ci4ms. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-35035 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score

9.1

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-5ghq-42rg-769x

Related CVEs

CVE-2026-34571
CRITICAL
CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise
CVE-2026-34569
CRITICAL
CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-34564
CRITICAL
CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-34561
CRITICAL
CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-25510
CRITICAL
CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor
CVE-2026-34567
CRITICAL
CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS
CVE-2026-34572
HIGH
CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)
CVE-2026-45270
HIGH
CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies