Skip to content
OpenAdvisories

Package · Packagist

unopim/unopim

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2025-55741

    unopim/unopim allows unauthorized product deletion via mass-delete endpoint

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. In versions 0.3.0 and earlier, users without the Delete privilege for products are unable to delete individual products via the standard endpoint, as expected…

    unopim unopim unopim/unopim Packagist
  • High 7.3
    CVE-2025-55743

    UnoPim vulnerable to remote code execution through Arbitrary File upload

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an ima…

    unopim unopim unopim/unopim Packagist
  • High 8.0
    CVE-2025-55742

    UnoPim Stored XSS via SVG MIME/Sanitizer Bypass

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vul…

    unopim unopim unopim/unopim Packagist