{"action":"Upgrade aimeos/ai-cms-grapesjs to 2021.10.8 or later.","affected":[{"fixed":"2021.10.8","introduced":"2021.04.1"},{"fixed":"2022.10.9","introduced":"2022.04.1"},{"fixed":"2023.10.15","introduced":"2023.04.1"},{"fixed":"2024.10.8","introduced":"2024.04.1"},{"fixed":"2025.10.2","introduced":"2025.04.1"}],"component":"aimeos/ai-cms-grapesjs","cve_ids":["CVE-2025-66468"],"ecosystem":"Packagist","epss":0.003,"exploited":false,"fixed_versions":["2021.10.8","2022.10.9","2023.10.15","2024.10.8","2025.10.2"],"ghsa_id":"GHSA-424m-fj2q-g7vg","id":"tcs_01M5KETE08JRFTRV11JVYQE61K","modified_at":"2025-12-03T14:27:33.103899Z","published_at":"2025-12-03T14:05:28Z","references":["https://osv.dev/vulnerability/GHSA-424m-fj2q-g7vg","https://github.com/aimeos/ai-cms-grapesjs/security/advisories/GHSA-424m-fj2q-g7vg","https://nvd.nist.gov/vuln/detail/CVE-2025-66468","https://github.com/aimeos/ai-cms-grapesjs/commit/2214f71ac27cdea25f11c8adf6bb5816db47a042","https://github.com/aimeos/ai-cms-grapesjs"],"severity":{"label":"high","score":7.6},"sources":[{"source":"osv","source_id":"GHSA-424m-fj2q-g7vg","url":"https://osv.dev/vulnerability/GHSA-424m-fj2q-g7vg"}],"summary":"Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors"}