https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14731.htmlhttps://patchthecve.com/cve/CVE-2025-14731.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 6.3: A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutralization of special elements used in a temphttps://patchthecve.com/cve/CVE-2025-14730.htmlhttps://patchthecve.com/cve/CVE-2025-14730.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 4.7: A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_Add/Cj_Edit results in code injection. Thhttps://patchthecve.com/cve/CVE-2025-14729.htmlhttps://patchthecve.com/cve/CVE-2025-14729.htmlWed, 07 Oct 2026 19:10:00 +0000MEDIUM 4.7: A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads to code injection. Remote exploitation https://patchthecve.com/cve/CVE-2025-4545.htmlhttps://patchthecve.com/cve/CVE-2025-4545.htmlWed, 17 Jun 2026 09:33:29 +0000MEDIUM 5.4: A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to path traversal. It is possible to launch