Skip to content
OpenAdvisories

Vendor

unopim

9 known vulnerabilities.

Products

unopim 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-102630

    UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host

    UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host…

    unopim unopim
  • Medium 6.9
    CVE-2025-55744

    UnoPim vulnerable to CSRF on Product edit feature and creation of other types

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

    unopim unopim unopim/unopim Packagist
  • Medium 6.5
    CVE-2024-52305

    UnoPim Stored XSS : Cookie hijacking through Create User function

    UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can uplo…

    unopim unopim unopim/unopim Packagist