Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
UnopimUnopim

7 matches found

CVE
CVE•added 2024/11/13 4:15 p.m.•49 views

CVE-2024-52305

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability exists in the Create User process, allowing the creation of a new admin account with an option to upload a profile image. An attacker can upload a malicious SVG file containing an em...

6.5CVSS5.5AI score0.00034EPSS
CVE
CVE•added 2024/11/06 5:15 p.m.•36 views

CVE-2024-50637

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.

5.4CVSS5.2AI score0.00251EPSS
Web
CVE
CVE•added 6 days ago•6 views

CVE-2025-55742

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1.

8CVSS6.2AI score0.0003EPSS
CVE
CVE•added 5 days ago•4 views

CVE-2025-55741

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. In versions 0.3.0 and earlier, users without the Delete privilege for products are unable to delete individual products via the standard endpoint, as expected. However, these users can bypass intend...

8.1CVSS6.4AI score0.00034EPSS
CVE
CVE•added 6 days ago•4 views

CVE-2025-55743

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, the image upload at the user creation feature performs only client side file type validation. A user can capture the request by uploading an image, capture the request through a Proxy ...

8.8CVSS7AI score0.00048EPSS
CVE
CVE•added 6 days ago•4 views

CVE-2025-55744

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

8.2CVSS6.9AI score0.00017EPSS
CVE
CVE•added 5 days ago•3 views

CVE-2025-55745

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Versions 0.3.0 and prior are vulnerable to CSV injection, also known as formula injection, in the Quick Export feature. This vulnerability allows attackers to inject malicious content into exported ...

5.5CVSS7.3AI score0.0046EPSS