CVE-2026-14632 | kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce Trusted Backend Interface MY_Controller.php setReferrer href redirect (GHSA-x9pg-hvpj-9q44)

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core/MY_Controller.php of the component Trusted Backend Interface. The manipulation of the argument href results in open redirect.

This vulnerability is identified as CVE-2026-14632. The attack can be executed remotely. Additionally, an exploit exists.

This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. A patch should be applied to remediate this issue.VulDB Recent EntriesRead More