TI-2025-35161 CVE-2025-55741 · GHSA-8p2f-fx4q-75cx
unopim/unopim allows unauthorized product deletion via mass-delete endpoint
Priority HIGH 70
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
Webkul
Records105All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high31CVSS 7.0–8.9
Exploited now
Webkul records in CISA KEVNo Webkul vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records in Unopim · all components
TI-2025-35162 CVE-2025-55742 · GHSA-xr97-25v7-hc2q
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass
Priority HIGH 68
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2024-34980 CVE-2024-52305 · GHSA-cgr4-c233-h733
UnoPim Stored XSS : Cookie hijacking through Create User function
Priority HIGH 68
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2025-35163 CVE-2025-55743 · GHSA-v22v-xwh7-2vrm
UnoPim vulnerable to remote code execution through Arbitrary File upload
Priority HIGH 65
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2025-35164 CVE-2025-55744 · GHSA-287x-6r2h-f9mw
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
Priority MEDIUM 64
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2024-34055 CVE-2024-50637 · GHSA-hv6m-qj65-26q3
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User…
Priority MEDIUM 58
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function.
TI-2025-35165 CVE-2025-55745 · GHSA-74rg-6f92-g6wx
UnoPim Quick Export feature is vulnerable to CSV injection
Priority MEDIUM 46
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.