Description

Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.

INFO

Published Date :

2025-12-08T00:00:00.000Z

Last Modified :

2025-12-11T14:37:05.722Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-65271 vulnerability.

Vendors Products
Azuriom
  • Azuriom
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-65271.

URL Resource
https://github.com/1337Skid/CVE-2025-65271 cve-icon cve-icon cve-icon
https://github.com/Azuriom/Azuriom cve-icon cve-icon
https://github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec cve-icon cve-icon
https://www.github.com/Azuriom/Azuriom cve-icon cve-icon
https://www.github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact