Vulnerability Details CVE-2025-14731
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.3%
CVSS Severity
CVSS v3 Score 6.3
CVSS v2 Score 6.5
References
- https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrN
- https://note-hxlab.wetolink.com/share/U6cnRoRfn09r
- https://vuldb.com/?ctiid.336488
- https://vuldb.com/?id.336488
- https://vuldb.com/?submit.707106
- https://vuldb.com/?submit.707107
- https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrN
- https://note-hxlab.wetolink.com/share/U6cnRoRfn09r
Products affected by CVE-2025-14731
-
cpe:2.3:a:ctcms_project:ctcms:2.1.2