High severity · published Dec 2, 2025
CVE-2025-13827
GrapesJsBuilder File Upload allows all file uploads
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
Summary
Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.
ImpactIf the media folder is not restricted from running files this can lead to a remote code execution.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mautic · Mautic
<4.4.18, <5.2.9, <6.0.7 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-13827
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-13827
github.com
https://github.com/mautic/mautic/security/advisories/GHSA-5xw2-57jx-pgjp
More from Mautic
9.8
CVE-2018-8092
Mautic before 2.13.0 allows CSV injection
9.0
CVE-2025-13828
Mautic user without privileged access to the Marketplace can install and uninstall composer packages
9.0
CVE-2020-35129
Mautic before 3.2.4 is affected by stored XSS
8.8
CVE-2026-3105
SQL Injection in Contact Activity API Sorting
8.1
CVE-2017-1000489
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address