Grapesjs Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:aimeos:grapesjs_cms:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aimeos (b4d165b0-ea44-5b6c-9214-9c2f903ffab7) |
|---|---|
| Product | Grapesjs Cms (b71716dc-573f-557a-aa88-4f10d57e0b76) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/aimeos/ai-cms-grapesjs |
purl2cpe | 2026-06-01 10:11:15.279744 |
pkg:github/aimeos/ai-cms-grapesjs |
purl2cpe | 2026-06-01 10:11:15.279746 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-66468 |
vulnerable | 2026-06-08 07:41:18.990927 |
Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors
HIGH (7.7)
The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components. Prior to 2021.10.8, 2022.10.8, 2023.10.8, 2024.10.8, and 2025.10.8, Javascript code can be injected by malicious editors for a stored XSS attack if the standard Content Security Policy is disabled. This vulnerability is fixed in 2021.10.8, 2022.10.8, 2023.10.8, 2024.10.8, and 2025.10.8.
Published: 2025-12-02T18:40:44.081Z
Updated: 2025-12-02T19:25:50.350Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.