Loading...
Skip to main content
GeekWala

CVE-2026-35035

CRITICAL

CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

Published April 6, 2026Updated May 5, 2026Source: osv

Summary

An attacker can acheive Full Account Takeover & Privilege Escalation via Stored DOM Blind XSS on public-facing landing pages through the System Settings Company Information section which allows the injection of XSS payloads

Remediation

Upgrade to the fixed version using your package manager.

Composer
Update ci4-cms-erp/ci4ms to 0.31.2.0 or later
composer require "ci4-cms-erp/ci4ms:^0.31.2.0"

After upgrading, run your dependency scanner again to confirm the vulnerability is resolved.

Affected Packages (1)

PackageEcosystemAffectedFixed In
ci4-cms-erp/ci4ms
packagist
0.21.0, 0.21.1, 0.21.2, 0.21.3 (+45 more)0.31.2.0

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-79
    Cross-site Scripting (XSS)MITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.1 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

References

Frequently Asked Questions

What is CVE-2026-35035?
CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.1/10).
How do I check if my project is affected by CVE-2026-35035?
CVE-2026-35035 affects ci4-cms-erp/ci4ms. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-35035 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.1

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-5ghq-42rg-769x

Related CVEs

  • CVE-2026-34559
    CRITICAL

    CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

  • CVE-2026-34566
    CRITICAL

    CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

  • CVE-2026-27599
    CRITICAL

    ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

  • CVE-2026-34563
    CRITICAL

    CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

  • CVE-2026-34571
    CRITICAL

    CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromise

  • CVE-2026-34569
    CRITICAL

    CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

  • CVE-2026-34570
    HIGH

    CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

  • CVE-2026-34572
    HIGH

    CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw)

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies