[MEDIUM] CI4MS: System Settings (Social Media Management) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

PKSA-76s3-z1f6-2f6c CVE-2026-34561 GHSA-gcfj-cf7j-vwgj

Affected package: ci4-cms-erp/ci4ms

Affected version: <=0.28.6.0

Reported by:
GitHub