CVE-2025-14731

HighCVSS 7.2/10Last modified Oct 7, 2026

Description

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-791 CWE-1336

Affected software

Vendor	Product	Versions
CTCMS	Content Management System	2.1.0; 2.1.1; 2.1.2

References

https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrNExploit, Third Party Advisory
https://note-hxlab.wetolink.com/share/U6cnRoRfn09rExploit, Third Party Advisory
https://vuldb.com/?ctiid.336488Permissions Required, VDB Entry
https://vuldb.com/?id.336488Third Party Advisory, VDB Entry
https://vuldb.com/?submit.707106Third Party Advisory, VDB Entry
https://vuldb.com/?submit.707107Third Party Advisory, VDB Entry
https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrNExploit, Third Party Advisory
https://note-hxlab.wetolink.com/share/U6cnRoRfn09rExploit, Third Party Advisory

Timeline

Published: Dec 16, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-147326.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several CVE-2025-147339.8An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbit CVE-2025-147345.4The Amazon affiliate lite Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.CVE-2025-147354.4The "Amazon affiliate lite Plugin" plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t CVE-2025-147369.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.28.29. T CVE-2025-147378.0Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This CVE-2025-147387.5Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file CVE-2025-147396.8Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute Do CVE-2025-14745.5In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to se CVE-2025-147406.7Docker Desktop for Windows contains multiple incorrect permission assignment vulnerabilities in the installer's handling of the C:\ProgramDa CVE-2025-147419.1The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to missing authorization to unauthorized data modification and deletion CVE-2025-147424.3The WP Recipe Maker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ajax_search_