CVE-2025-14729 | BDVDB-2026-306038 Detail

Description#

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-12-15Record published in the CVE List.
2. Version 22025-12-16Most recent update recorded in the CVE List.