CVE detail
CVE-2025-14730
A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 16.1 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
4 source links · newest first
- https://vuldb.com/?submit.707105vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://vuldb.com/?id.336487vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://vuldb.com/?ctiid.336487vuldb.com
No excerpt available.
Exploitvuldb.comDec 15, 2025, 11:15 PM - https://note-hxlab.wetolink.com/share/87u6f02Gho0Knote-hxlab.wetolink.com
No excerpt available.
Exploitnote-hxlab.wetolink.comDec 15, 2025, 11:15 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-14729CVSS 2.0 · Low
A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backen…
- CVE-2026-16204CVSS 2.1 · Low
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_run_script_execute of the file claw/services/tools/script.c of the component Tele…
- CVE-2026-15533CVSS 2.0 · Low
A security flaw has been discovered in DedeCMS 5.7.118. Impacted is an unknown function of the file /plus/search.php of the component Column Management. Performing a manipulation…
- CVE-2026-15512CVSS 2.1 · Low
A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\p…
- CVE-2026-15497CVSS 5.5 · Medium
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/control…
- CVE-2026-14749CVSS 5.5 · Medium
A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/c…