Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.
History

Tue, 09 Dec 2025 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Azuriom
Azuriom azuriom
Vendors & Products Azuriom
Azuriom azuriom

Mon, 08 Dec 2025 18:30:00 +0000

Type Values Removed Values Added
Description Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-12-08T00:00:00.000Z

Updated: 2025-12-08T18:10:46.395Z

Reserved: 2025-11-18T00:00:00.000Z

Link: CVE-2025-65271

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-08T19:15:50.540

Modified: 2025-12-09T18:37:33.427

Link: CVE-2025-65271

cve-icon Redhat

No data.