CVE-2025-65271: Code Injection
Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65271?
CVE-2025-65271 has a critical severity rating due to the potential for privilege escalation via client-side template injection.
How do I fix CVE-2025-65271?
To fix CVE-2025-65271, upgrade Azuriom CMS to version 1.2.8 or later where the vulnerability has been patched.
What are the impacts of CVE-2025-65271?
CVE-2025-65271 allows a low-privilege user to execute arbitrary template code in an administrator's session, potentially compromising the entire system.
Who is affected by CVE-2025-65271?
CVE-2025-65271 affects users of Azuriom CMS versions prior to 1.2.8.
What type of attack is associated with CVE-2025-65271?
CVE-2025-65271 is associated with client-side template injection attacks, which enable code execution under certain conditions.