CVE-2025-14729 - CTCMS Content Management System Backend App Configuration Ct_App.php save code i...

CVE ID : CVE-2025-14729 Published : 15 Dec 2025, 11:15 p.m. | 21 minutes ago Description : A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Severity: 5.8 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor