Skip to content
Threat Feed

Vendor

CodeIgniter

1 brief RSS
high threat

CI4MS Stored XSS Vulnerability in Pages Module

A stored XSS vulnerability (CVE-2026-45270) exists in the Pages module of CI4MS due to improper sanitization of page content, allowing an attacker with `pages.create` permissions to inject malicious code and escalate privileges if an administrator views the page.

ci4-cms-erp/ci4ms xss stored-xss ci4ms cve-2026-45270
2r 3t 1i