CVE-2025-14731

Summary

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Affected Software

VendorProductVersion RangeStatus
CTCMSContent Management System2.1.0affected
CTCMSContent Management System2.1.1affected
CTCMSContent Management System2.1.2affected

Weaknesses

  • CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine
  • CWE-791: Incomplete Filtering of Special Elements

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

Additional References

References