https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T01:26:41.768047+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14729 CVE-2025-14729 — CTCMS Content Management System Backend App Configuration Ct_App.php save code injection 2026-10-08T01:26:41.787318+00:00

Affected: CTCMS Content Management System

A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.