aimeos vulnerabilities

CVEs per yearBy the year they were published

1. 202410
2. 20251
3. 20262

Newest CVEs

• CVE-2026-49262

  Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy

  aimeos · pagible

  Low3.0
• CVE-2021-47763

  Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection

  Aimeos · Aimeos Laravel ecommerce platform

  High8.8
• CVE-2025-66468

  Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors

  aimeos · ai-cms-grapesjs

  High7.7
• CVE-2024-47173

  Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

  aimeos · ai-admin-graphql

  Medium5.5
• CVE-2024-39319

  aimeos/ai-controller-frontend has IDOR vulnerability in account profile page

  aimeos · ai-controller-frontend

  Medium5.3
• CVE-2024-39325

  aimeos/ai-controller-frontend doesn't reset payment status in basket

  aimeos · ai-controller-frontend

  Medium5.3
• CVE-2024-39322

  aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

  aimeos · ai-admin-jsonadm

  Medium5.5
• CVE-2024-39324

  aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

  aimeos · ai-admin-graphql

  Low3.8
• CVE-2024-39323

  aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

  aimeos · ai-admin-graphql

  High7.1
• CVE-2024-38516

  Aimeos HTML client may potentially reveal sensitive information in error log

  aimeos · ai-client-html

  High8.8