CVE-2025-65271

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-65271
Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard components that render untrusted user input, potentially enabling privilege escalation to an administrative account. Fixed in Azuriom 1.2.7.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/1337Skid/CVE-2025-65271 Third Party Advisory
https://github.com/Azuriom/Azuriom Product
https://github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec Patch
https://www.github.com/Azuriom/Azuriom Product
https://www.github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec Patch
https://github.com/1337Skid/CVE-2025-65271 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:azuriom:azuriom:*:*:*:*:*:*:*:*
History

12 Dec 2025, 15:11

Type Values Removed Values Added
CPE cpe:2.3:a:azuriom:azuriom:*:*:*:*:*:*:*:*
First Time Azuriom
Azuriom azuriom
References () https://github.com/1337Skid/CVE-2025-65271 - () https://github.com/1337Skid/CVE-2025-65271 - Third Party Advisory
References () https://github.com/Azuriom/Azuriom - () https://github.com/Azuriom/Azuriom - Product
References () https://github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec - () https://github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec - Patch
References () https://www.github.com/Azuriom/Azuriom - () https://www.github.com/Azuriom/Azuriom - Product
References () https://www.github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec - () https://www.github.com/Azuriom/Azuriom/commit/0289175547319add814dcb526e8ba034f1ebc3ec - Patch

11 Dec 2025, 15:15

Type Values Removed Values Added
CWE CWE-94
References () https://github.com/1337Skid/CVE-2025-65271 - () https://github.com/1337Skid/CVE-2025-65271 -
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8

08 Dec 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-08 19:15

Updated : 2025-12-12 15:11

NVD link : CVE-2025-65271

Mitre link : CVE-2025-65271

CVE.ORG link : CVE-2025-65271

JSON object : View

Products Affected

azuriom

  • azuriom
CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')