CVE detail
CVE-2025-14729
A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- https://vuldb.com/?submit.707104vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://vuldb.com/?id.336486vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://vuldb.com/?ctiid.336486vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://note-hxlab.wetolink.com/share/R3y6uiOuuYbAnote-hxlab.wetolink.com
No excerpt available.
Exploitnote-hxlab.wetolink.comDec 15, 2025, 11:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-14730CVSS 2.0 · Low
A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the com…
- CVE-2026-16204CVSS 2.1 · Low
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_run_script_execute of the file claw/services/tools/script.c of the component Tele…
- CVE-2026-15533CVSS 2.0 · Low
A security flaw has been discovered in DedeCMS 5.7.118. Impacted is an unknown function of the file /plus/search.php of the component Column Management. Performing a manipulation…
- CVE-2026-15512CVSS 2.1 · Low
A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\p…
- CVE-2026-15497CVSS 5.5 · Medium
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/control…
- CVE-2026-14749CVSS 5.5 · Medium
A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/c…