TI-2026-16196 CVE-2026-19975 · GHSA-m9j6-2rfj-56fw
Azuriom CMS Money Transfer ProfileController.php transferMoney toctou
Priority MEDIUM 45
A weakness has been identified in Azuriom CMS up to 1.2.12.
Vulnerabilities
3 records
TI-2026-39291 CVE-2026-54415 · GHSA-3h94-x92g-h9g5
Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover
Priority LOW 39
Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tok…
TI-2025-40310 CVE-2025-65271 · GHSA-8w85-pvh2-gq59
Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a…
Priority HIGH 73
Client-side template injection (CSTI) in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session.