[HIGH] Aimeos GrapesJS CMS extension has possible stored XSS that's exploitable by authenticated editors

PKSA-zwdc-m87t-6qvk CVE-2025-66468 GHSA-424m-fj2q-g7vg

Affected package: aimeos/ai-cms-grapesjs

Affected version: >=2025.04.1,<2025.10.2|>=2024.04.1,<2024.10.8|>=2023.04.1,<2023.10.15|>=2022.04.1,<2022.10.9|>=2021.04.1,<2021.10.8

Reported by:
GitHub