Lucene search
K

7 matches found

Packet Storm
Packet Storm
β€’added 2025/12/12 12:0 a.m.β€’159 views

πŸ“„ Azuriom CMS 1.2.6 Client-Side Template Injection

A client-side template injection vulnerability affects the Azuriom CMS Admin Dashboard in version 1.2.6. Several dashboard components widgets, plugins, and admin panels render untrusted user input inside the administrator's browser. Low-privileged users can inject template expressions that execut...

8.8CVSS7.5AI score0.00075EPSS
Exploits2
EUVD
EUVD
β€’added 2025/12/08 9:30 p.m.β€’2 views

EUVD-2025-201795

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

7.5AI score0.00075EPSS
Exploits2References6
OSV
OSV
β€’added 2025/12/08 7:15 p.m.β€’2 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

8.8CVSS8AI score0.00075EPSS
Exploits2References5
CVE
CVE
β€’added 2025/12/08 12:0 a.m.β€’15 views

CVE-2025-65271

Azuriom CMS is affected by a Client-Side Template Injection (CSTI) in the Admin Dashboard. The vulnerability allows a low-privilege user to inject template code that runs in the context of an administrator’s session, via widgets, plugins, or components that render untrusted input. The issue is de...

8.8CVSS7.6AI score0.00075EPSS
Exploits2References5Affected Software1
Vulnrichment
Vulnrichment
β€’added 2025/12/08 12:0 a.m.β€’1 views

CVE-2025-65271

Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege...

7.6AI score0.00075EPSS
Exploits2References5
Positive Technologies
Positive Technologies
β€’added 2025/12/08 12:0 a.m.β€’1 views

PT-2025-49587

Name of the Vulnerable Software and Affected Versions Azuriom CMS versions prior to 1.2.7 Description A client-side template injection CSTI issue exists in the Azuriom CMS admin dashboard. A low-privilege user can execute arbitrary template code within the context of an administrator's session...

8.8CVSS7.5AI score0.00075EPSS
Exploits2References7
GithubExploit
GithubExploit
β€’added 2025/12/07 11:50 a.m.β€’199 views

Exploit for CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node serv...

8.1AI score0.00075EPSS
Exploits2
Rows per page
Query Builder