CVE-2025-14731

The record

A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a template engine. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.

Affected packages

Related vulnerabilities

• CVE-2026-86206 A vulnerability in the N-central internal API access control filter allows unauthorised… CWE-791
• CVE-2026-75979 A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. CWE-791
• CVE-2026-19929 A vulnerability was identified in OpenBoxes up to 0.9.6. CWE-791
• CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE… CWE-791
• CVE-2026-48208 An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition… CWE-791
• CVE-2026-9498 A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. CWE-791
• CVE-2026-8740 A flaw has been found in Sanluan PublicCMS 5.202506.d. CWE-791
• CVE-2026-44232 DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF… CWE-791