A vulnerability classified as problematic has been found in ci4-cms-erp ci4ms 0.28.5.0/0.31.0.0. Impacted is an unknown function of the component Setting Handler. The manipulation leads to cross site scripting.
This vulnerability is listed as CVE-2026-35035. The attack may be initiated remotely. There is no available exploit.
It is recommended to upgrade the affected component.
