CVE-2025-14836

LOW

ZZCMS 2025 - Info Disclosure

Title source: llm

Description

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has been published and may be used.

References (4)

Scores

CVSS v3 2.7
EPSS 0.0001
EPSS Percentile 2.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-312 CWE-313
Status published

Affected Products (1)

zzcms/zzcms

Timeline

Published Dec 17, 2025
Tracked Since Feb 18, 2026