aimeos

Top products

The 13 most recently published vulnerabilities affecting aimeos.

• CVE-2026-49262Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy3.0Aug 12, 2026
• CVE-2021-47763Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection8.2Jan 15, 2026
• CVE-2025-66468Aimeos GrapesJS CMS extension possible stores XSS exploitable by authenticated editors7.6Dec 2, 2025
• CVE-2024-47173Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups5.5Oct 24, 2024
• CVE-2024-39319aimeos/ai-controller-frontend has IDOR vulnerability in account profile page5.3Sep 26, 2024
• CVE-2024-39325aimeos/ai-controller-frontend doesn't reset payment status in basket5.3Jul 2, 2024
• CVE-2024-39322aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records5.5Jul 2, 2024
• CVE-2024-39324aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services3.8Jul 2, 2024
• CVE-2024-39323aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account7.1Jul 2, 2024
• CVE-2024-38516Aimeos HTML client may potentially reveal sensitive information in error log8.8Jun 25, 2024
• CVE-2024-37296Aimeos HTML client vulnerable to digital products download without proper payment status check5.3Jun 11, 2024
• CVE-2024-37295Aimeos Core remote code execution in web server context7.2Jun 11, 2024
• CVE-2024-37294Aimeos denial of service vulnerability in SaaS and marketplace setups5.5Jun 11, 2024