Skip to content
OpenAdvisories

Vendor

aimeos

13 known vulnerabilities.

Products

ai-admin-graphql 3 ai-controller-frontend 2 aimeos-core 2 ai-client-html 2 ai-admin-jsonadm 1 Aimeos Laravel ecommerce platform 1 pagible 1 ai-cms-grapesjs 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.2
    CVE-2021-47763

    Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection

    Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests…

    aimeos Aimeos Laravel ecommerce platform aimeos/aimeos-laravel Packagist
  • High 7.7
    CVE-2025-66468

    Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors

    The Aimeos GrapesJS CMS extension provides page editor for creating content pages based on extensible components. Prior to 2021.10.8, 2022.10.8, 2023.10.8, 2024.10.8, and 2025.10.8, Javascript code can be injected by malicious editors for a stored XSS attack …

    aimeos ai-cms-grapesjs aimeos/ai-cms-grapesjs Packagist
  • High 7.1
    CVE-2024-39323

    aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

    aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.01 and prior to versions 2022.10.10, 2023.10.6, and 2024.04.6, an improper access control vulnerability allows an editor to modify and take over an admin account in…

    aimeos ai-admin-graphql aimeos/ai-admin-graphql Packagist
  • High 8.8
    CVE-2024-38516

    Aimeos HTML client may potentially reveal sensitive information in error log

    ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

    aimeos ai-client-html aimeos/ai-client-html Packagist
  • High 7.2
    CVE-2024-37295

    Aimeos Core remote code execution in web server context

    Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the c…

    aimeos aimeos-core aimeos/aimeos-core Packagist