CVE-2025-66468
1 advisory.
Packagist/aimeos/ai-cms-grapesjs CVE-2025-66468: high 7.6, EPSS 0.28%
Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors
Action: Upgrade aimeos/ai-cms-grapesjs to 2021.10.8 or later.
composer require aimeos/ai-cms-grapesjs:2021.10.8composer require aimeos/ai-cms-grapesjs:2022.10.9composer require aimeos/ai-cms-grapesjs:2023.10.15composer require aimeos/ai-cms-grapesjs:2024.10.8composer require aimeos/ai-cms-grapesjs:2025.10.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 2021.04.1 | 2021.10.8 | - |
| 2022.04.1 | 2022.10.9 | - |
| 2023.04.1 | 2023.10.15 | - |
| 2024.04.1 | 2024.10.8 | - |
| 2025.04.1 | 2025.10.2 | - |
Fixed versions
| 2021.10.8 | 2022.10.9 | 2023.10.15 | 2024.10.8 | 2025.10.2 |
Sources
- osv: GHSA-424m-fj2q-g7vg
- https://github.com/aimeos/ai-cms-grapesjs/security/advisories/GHSA-424m-fj2q-g7vg
- https://nvd.nist.gov/vuln/detail/CVE-2025-66468
- https://github.com/aimeos/ai-cms-grapesjs/commit/2214f71ac27cdea25f11c8adf6bb5816db47a042
- https://github.com/aimeos/ai-cms-grapesjs
CVE-2025-66468 · published · modified · JSON