Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.
Metrics
Affected Vendors & Products
References
History
Tue, 09 Dec 2025 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Azuriom
Azuriom azuriom |
|
| Vendors & Products |
Azuriom
Azuriom azuriom |
Mon, 08 Dec 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published: 2025-12-08T00:00:00.000Z
Updated: 2025-12-08T18:10:46.395Z
Reserved: 2025-11-18T00:00:00.000Z
Link: CVE-2025-65271
No data.
Status : Awaiting Analysis
Published: 2025-12-08T19:15:50.540
Modified: 2025-12-09T18:37:33.427
Link: CVE-2025-65271
No data.