CVE-2025-14836
Cleartext Storage Vulnerability in ZZCMS 2025 User Module
Publication date: 2025-12-17
Last updated on: 2026-04-29
Assigner: VulDB
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| zzcms | zzcms | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-313 | The product stores sensitive information in cleartext in a file, or on disk. |
| CWE-312 | The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a flaw in ZZCMS 2025 affecting the User Data Storage Module, specifically in the /reg/user_save.php file. It causes user data to be stored in cleartext on disk, which means sensitive information is not encrypted and can be accessed by unauthorized parties. The vulnerability can be exploited remotely, and an exploit has already been published.
How can this vulnerability impact me? :
The vulnerability can lead to unauthorized access to sensitive user data because it is stored in cleartext. This exposure can result in data breaches, loss of user privacy, and potential misuse of the information by attackers who exploit the flaw remotely.