Lucene search
K

11 matches found

Packet Storm
Packet Storm
added 2025/12/12 12:0 a.m.163 views

📄 Azuriom CMS 1.2.6 Client-Side Template Injection

A client-side template injection vulnerability affects the Azuriom CMS Admin Dashboard in version 1.2.6. Several dashboard components widgets, plugins, and admin panels render untrusted user input inside the administrator's browser. Low-privileged users can inject template expressions that execut...

8.8CVSS7.5AI score0.00075EPSS
Exploits2
RedhatCVE
RedhatCVE
added 2025/12/09 8:26 p.m.3 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

8.8CVSS8.1AI score0.00075EPSS
Exploits2References1
EUVD
EUVD
added 2025/12/08 9:30 p.m.3 views

EUVD-2025-201795

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

7.5AI score0.00075EPSS
Exploits2References6
OSV
OSV
added 2025/12/08 7:15 p.m.3 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

8.8CVSS8AI score0.00075EPSS
Exploits2References5
NVD
NVD
added 2025/12/08 7:15 p.m.1 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

8.8CVSS0.00075EPSS
Exploits2References5
CVE
CVE
added 2025/12/08 12:0 a.m.18 views

CVE-2025-65271

Azuriom CMS is affected by a Client-Side Template Injection (CSTI) in the Admin Dashboard. The vulnerability allows a low-privilege user to inject template code that runs in the context of an administrator’s session, via widgets, plugins, or components that render untrusted input. The issue is de...

8.8CVSS7.6AI score0.00075EPSS
Exploits2References5Affected Software1
CNNVD
CNNVD
added 2025/12/08 12:0 a.m.2 views

Azuriom 安全漏洞

Azuriom is an Azuriom open source web solution for game servers. A security vulnerability exists in Azuriom versions prior to 1.2.7 that stems from the presence of client-side template injection in the administration dashboard, which could lead to elevation of privilege...

8.8CVSS6.7AI score0.00075EPSS
Exploits2References5
Cvelist
Cvelist
added 2025/12/08 12:0 a.m.18 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

0.00075EPSS
Exploits2References5
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.1 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

7.6AI score0.00075EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.2 views

PT-2025-49587

Name of the Vulnerable Software and Affected Versions Azuriom CMS versions prior to 1.2.7 Description A client-side template injection CSTI issue exists in the Azuriom CMS admin dashboard. A low-privilege user can execute arbitrary template code within the context of an administrator's session...

8.8CVSS7.5AI score0.00075EPSS
Exploits2References7
GithubExploit
GithubExploit
added 2025/12/07 11:50 a.m.207 views

Exploit for CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node serv...

8.1AI score0.00075EPSS
Exploits2
Rows per page
Query Builder