A vulnerability marked as problematic has been reported in ci4-cms-erp ci4ms 0.28.5.0. This affects an unknown function of the component Categories Section. Performing a manipulation results in cross site scripting. This vulnerability was named CVE-2026-34567. The attack may be initiated remotely.
| Vendor | Product | Versions |
|---|---|---|
| ci4-cms-erp | ci4ms | composer/ci4-cms-erp/ci4ms: <= 0.28.6.0, 0.28.5.0 |
Updated affected versions to include 0.28.5.0, marked exploit availability as false, and provided a new description with details about CVE-2026-34567.
Initial creation
