ci4-cms-erp/ci4ms Security Advisories for 0.31.7.0 (2)
-
[MEDIUM] CI4MS has a Deactivated User Session Bypass (active=0)
PKSA-cf98-gsv6-bv96 CVE-2026-41891 GHSA-5hfv-c864-qcq9
Affected version: >=0.26.0,<=0.31.7.0
Reported by:
GitHub -
[MEDIUM] CI4MS Vulnerable to Arbitrary Database Table Drop via Theme deleteProcess
PKSA-kq1j-n47j-c2p7 CVE-2026-41890 GHSA-vgrf-pr28-vf98
Affected version: >=0.31.1.0,<=0.31.7.0
Reported by:
GitHub