Azuriom

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Azuriom records in CISA KEV

No Azuriom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Azuriom 1 record HIGH

Records

3 records

TI-2025-40310 CVE-2025-65271 · GHSA-8w85-pvh2-gq59

Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a…

HIGH 73

Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00418 Published 2025-12-08 No fix listed CWE-94

TI-2026-16196 CVE-2026-19975 · GHSA-m9j6-2rfj-56fw

Azuriom CMS Money Transfer ProfileController.php transferMoney toctou

MEDIUM 45

A weakness has been identified in Azuriom CMS up to 1.2.12.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00265 Published 2026-08-17 Fixed in 1.2.13 CWE-362

TI-2026-39291 CVE-2026-54415 · GHSA-3h94-x92g-h9g5

Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

LOW 39

Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tok…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00348 Published 2026-06-17 No fix listed CWE-269

Open these records in search →

Critical	0
High	2
Medium	0
Low	1
No CVSS	0