Skip to content
OpenAdvisories

Package · Packagist

unopim/unopim

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-55744

    UnoPim vulnerable to CSRF on Product edit feature and creation of other types

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

    unopim unopim unopim/unopim Packagist
  • Medium 6.5
    CVE-2024-52305

    UnoPim Stored XSS : Cookie hijacking through Create User function

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can uplo…

    unopim unopim unopim/unopim Packagist
  • Medium 5.4
    CVE-2024-50637

    UnoPim Cross-site Scripting vulnerability

    UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.

    unopim/unopim Packagist