CVE-2021-28380: Aimeos Project Aimeos

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account.

Affected products

• Aimeos Project Aimeos: before 19.10.12 (fixed in 19.10.12); from 20.0.0, before 20.10.5 (fixed in 20.10.5)

Published 2021-03-16. Last modified 2026-06-17.