CVE Feed

    Dashboard / CVE / CVE-2025-14731

    CVE-2025-14731

    A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

    Published:Dec 15, 2025
    Last Modified:Dec 24, 2025
    EPS:Dec 15, 2025
    EPSS Score:0.00058
    CVSS Score:6.3

    Affected Products

    Vendor
    Ctcms
    Product
    Content Management System
    Vendor
    Ctcms Project
    Product
    Ctcms

    Exploits

    https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrNhttps://note-hxlab.wetolink.com/share/U6cnRoRfn09rhttps://note-hxlab.wetolink.com/share/Ros8ZIeCLQrNhttps://note-hxlab.wetolink.com/share/U6cnRoRfn09r

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High