CVE-2025-14836
Unknown
Unknown - Not Provided
Cleartext Storage Vulnerability in ZZCMS 2025 User Module
Publication date: 2025-12-17
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/user_save.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has been published and may be used.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zzcms | zzcms | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-312 | The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. |
| CWE-313 | The product stores sensitive information in cleartext in a file, or on disk. |