CVE-2026-34560 | ci4-cms-erp ci4ms 0.28.5.0 Logs Interface cross site scripting (GHSA-r4v5-rwr2-q7r4)

April 2, 2026 Yanac

A vulnerability was found in ci4-cms-erp ci4ms 0.28.5.0. It has been declared as problematic. This vulnerability affects unknown code of the component Logs Interface. Executing a manipulation can lead to cross site scripting.

This vulnerability appears as CVE-2026-34560. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More