Beveiligingsadvies

CVE-2025-14729

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-15 23:02:07
Laatst bijgewerkt 2025-12-16 15:09:50
Toegewezen door VulDB
CVSS-score 5.8
Status PUBLISHED

Beschrijving

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.