CVE-2025-14731: CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine

Severity: high (CVSS 7.2 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-16 · updated 2026-10-07
Weakness: CWE-791

Description

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Affected products

Ctcms: through 2.1.2

References

https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrN
https://note-hxlab.wetolink.com/share/U6cnRoRfn09r
https://vuldb.com/?ctiid.336488
https://vuldb.com/?id.336488
https://vuldb.com/?submit.707106
https://vuldb.com/?submit.707107
https://note-hxlab.wetolink.com/share/Ros8ZIeCLQrN
https://note-hxlab.wetolink.com/share/U6cnRoRfn09r

Get alerted when CVE-2025-14731 or the next vulnerability affects your stack