Vulnerability Description
A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Zzcms | Zzcms | 2025 |
Related Weaknesses (CWE)
References
- https://note-hxlab.wetolink.com/share/bu2KYevoyBm6Third Party Advisory
- https://vuldb.com/?ctiid.336986Permissions RequiredVDB Entry
- https://vuldb.com/?id.336986Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.711654Third Party AdvisoryVDB Entry
- https://note-hxlab.wetolink.com/share/bu2KYevoyBm6Third Party Advisory
FAQ
What is CVE-2025-14836?
CVE-2025-14836 is a vulnerability with a CVSS score of 2.7 (LOW). A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes clear...
How severe is CVE-2025-14836?
CVE-2025-14836 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-14836?
Check the references section above for vendor advisories and patch information. Affected products include: Zzcms Zzcms.