aimeos/ai-cms-grapesjs

Releases89

Frequency3 weeks

Last Release about 2 months ago

Stars1.01K

GrapesJS CMS integration into Aimeos

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-66468 ↗	Dec 2, 2025Tuesday, 2 December 2025, 19:15	7.6 HIGH	—
The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components. Prior to 2021.10.8, 2022.10.8, 2023.10.8, 2024.10.8, and 2025.10.8, Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled. This vulnerability is fixed in 2021.10.8, 2022.10.8, 2023.10.8, 2024.10.8, and 2025.10.8.