CTCMS vulnerabilities
We track 5 vulnerabilities in CTCMS products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.
Latest CTCMS vulnerabilities
- 7.2 High severity
Content Management System: Incomplete Filtering of Special Elements
A weakness has been identified in CTCMS Content Management System up to 2.1.2. This affects an unknown function in the library /ctcms/apps/libraries/CT_Parser.php of the component Frontend/Template Management Module. This manipulation causes improper neutraliz
- 7.2 High severity
Content Management System: Improper Control of Generation of Code
A security flaw has been discovered in CTCMS Content Management System up to 2.1.2. The impacted element is an unknown function in the library /ctcms/libs/Ct_Config.php of the component Backend System Configuration Module. The manipulation of the argument Cj_A
- 7.2 High severity
Content Management System: Improper Control of Generation of Code
A vulnerability was identified in CTCMS Content Management System up to 2.1.2. The affected element is the function Save of the file /ctcms/libs/Ct_App.php of the component Backend App Configuration Module. The manipulation of the argument CT_App_Paytype leads
- 8.1 High severity
Content Management System: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in CTCMS Content Management System 2.1.2. It has been classified as critical. Affected is the function del of the file ctcms\apps\controllers\admin\Tpl.php of the component File Handler. The manipulation of the argument File leads to
- 8.1 High severity
Ctcms: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Ctcms 2.1.2. It has been declared as critical. This vulnerability affects unknown code of the file ctcms/apps/controllers/admin/Upsys.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The com