Composer ci4-cms-erp/ci4ms has 36 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2026-25510 | CI4MS Vulnerable to Remote Code Execution (RCE) via Arbitrary File Creation and Save in File Editor | critical | 9.9 | <0.28.5.0 | 0.28.5.0 |
| CVE-2026-41202 | CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE | critical | 0.0 | <0.31.5.0 | 0.31.5.0 |
| CVE-2026-41587 | CI4MS has Unrestricted PHP File Upload via Theme Installation that Leads to Authenticated Remote Code Execution | high | 0.0 | >=0.26.0.0 and <0.31.7.0 | 0.31.7.0 |
| CVE-2026-41203 | CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE | critical | 0.0 | <0.31.5.0 | 0.31.5.0 |
| CVE-2026-39394 | CI4MS Vulnerable to .env CRLF Injection via Unvalidated `host` Parameter in Install Controller | high | 8.1 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-34570 | CI4MS: Account Deletion Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) | high | 8.8 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34572 | CI4MS: Account Deactivation Module Grants Full Persistent Unauthorized Access for All‑Roles via Improper Session Invalidation (Logic Flaw) | high | 8.8 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-39389 | CI4MS has a Hidden Items Authorization Bypass in Fileeditor Allows Reading Secrets and Writing Protected Files | medium | 6.7 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-35035 | CI4MS: Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via Syst | critical | 9.1 | <0.31.2.0 | 0.31.2.0 |
| CVE-2026-39393 | CI4MS Vulnerable to Post-Installation Re-entry via Cache-Dependent Install Guard Bypass | high | 8.1 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-41890 | CI4MS Vulnerable to Arbitrary Database Table Drop via Theme deleteProcess | medium | 0.0 | >=0.31.1.0 and <0.31.8.0 | 0.31.8.0 |
| CVE-2026-34571 | CI4MS: Stored Cross‑Site Scripting (Stored XSS) in Backend User Management Allows Session Hijacking and Full Administrative Account Compromi | critical | 9.9 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-25509 | CI4MS Vulnerable to User Email Enumeration via Password Reset Flow | medium | 5.3 | <0.28.5.0 | 0.28.5.0 |
| CVE-2026-34560 | CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-27599 | ci4-cms-erp/ci4ms: System Settings (Mail Settings) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-41201 | CI4MS: Backup Management Full Account Takeover for All Roles & Privilege Escalation via Stored DOM Blind XSS | medium | 6.8 | <0.31.5.0 | 0.31.5.0 |
| CVE-2026-34569 | CI4MS: Blogs Categories Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.9 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34559 | CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-45139 | CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations | medium | 6.5 | <0.31.9.0 | 0.31.9.0 |
| CVE-2026-34557 | CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34558 | CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34568 | CI4MS: Blogs Posts Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34564 | CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34989 | CI4MS: Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.0 | <31.0.0.0 | 31.0.0.0 |
| CVE-2026-34562 | CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Store | medium | 4.7 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34563 | CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS | critical | 9.9 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34565 | CI4MS: Menu Management (Posts) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34566 | CI4MS: Pages Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-34567 | CI4MS: Blogs Posts (Categories) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-41891 | CI4MS has a Deactivated User Session Bypass (active=0) | medium | 0.0 | >=0.26.0 and <0.31.8.0 | 0.31.8.0 |
| CVE-2026-45270 | CI4MS: Stored XSS in Pages Module Content via Broken html_purify Validation Rule | high | 8.7 | <0.31.9.0 | 0.31.9.0 |
| CVE-2026-39392 | CI4MS has stored XSS in Pages Content Due to Missing html_purify Sanitization | medium | 5.5 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-39390 | CI4MS has stored XSS via srcdoc attribute bypass in Google Maps iframe setting | medium | 5.5 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-39391 | CI4MS has stored XSS via Unescaped Blacklist Note in Admin User List | medium | 4.8 | <0.31.4.0 | 0.31.4.0 |
| CVE-2026-34561 | CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via S | critical | 9.1 | <0.31.0.0 | 0.31.0.0 |
| CVE-2026-45138 | CI4MS: Stored XSS in Blog Content via Broken `html_purify` Validation Rule | medium | 5.4 | <0.31.9.0 | 0.31.9.0 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked