ctcms project records
5 published records for vendor ctcms project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-791 Incomplete Filtering of Special Elements1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
32Monitor | CVE-2024-1925No exploit | Ctcms Upsys.php unrestricted uploadctcms project · ctcms · CWE-434 | High8.1 | — | 0.5% | Feb 27, 2024 |
21Monitor | CVE-2025-4545No exploit | CTCMS Content Management System File Tpl.php del path traversalctcms project · ctcms · CWE-22 | Medium5.3 | — | 0.8% | May 11, 2025 |
8Monitor | CVE-2025-14729No exploit | CTCMS Content Management System Backend App Configuration Ct_App.php save code injectionctcms project · ctcms · CWE-74 | Low2.0 | — | 0.4% | Dec 15, 2025 |
8Monitor | CVE-2025-14730No exploit | CTCMS Content Management System Backend System Configuration Ct_Config.php code injectionctcms project · ctcms · CWE-74 | Low2.0 | — | 0.4% | Dec 15, 2025 |
8Monitor | CVE-2025-14731No exploit | CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template enginectcms project · ctcms · CWE-791 | Low2.1 | — | 0.4% | Dec 16, 2025 |
- CVE-2024-192532Monitor
Ctcms Upsys.php unrestricted upload
HighCVSS 8.1No exploitEPSS 0%ctcms project · ctcmsFeb 27, 2024
- CVE-2025-454521Monitor
CTCMS Content Management System File Tpl.php del path traversal
MediumCVSS 5.3No exploitEPSS 0%ctcms project · ctcmsMay 11, 2025
- CVE-2025-147298Monitor
CTCMS Content Management System Backend App Configuration Ct_App.php save code injection
LowCVSS 2.0No exploitEPSS 0%ctcms project · ctcmsDec 15, 2025
- CVE-2025-147308Monitor
CTCMS Content Management System Backend System Configuration Ct_Config.php code injection
LowCVSS 2.0No exploitEPSS 0%ctcms project · ctcmsDec 15, 2025
- CVE-2025-147318Monitor
CTCMS Content Management System Frontend/Template Management CT_Parser.php special elements used in a template engine
LowCVSS 2.1No exploitEPSS 0%ctcms project · ctcmsDec 16, 2025