Aimeos Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Aimeos Project records in CISA KEV

No Aimeos Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ai-controller-frontend 1 record LOW Aimeos 1 record LOW

Records

1 record in Aimeos · all components

TI-2021-09534 CVE-2021-28380 · GHSA-73wv-rgj7-vjj9

The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x…

LOW 25

The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00555 Published 2021-03-16 Fixed in 19.10.12, 20.10.5 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0