TI-2025-35165 CVE-2025-55745 · GHSA-74rg-6f92-g6wx
UnoPim Quick Export feature is vulnerable to CSV injection
Priority MEDIUM 46
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
Vulnerabilities
7 records
TI-2025-35161 CVE-2025-55741 · GHSA-8p2f-fx4q-75cx
unopim/unopim allows unauthorized product deletion via mass-delete endpoint
Priority HIGH 70
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2025-35164 CVE-2025-55744 · GHSA-287x-6r2h-f9mw
UnoPim vulnerable to CSRF on Product edit feature and creation of other types
Priority MEDIUM 64
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2025-35163 CVE-2025-55743 · GHSA-v22v-xwh7-2vrm
UnoPim vulnerable to remote code execution through Arbitrary File upload
Priority HIGH 65
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2025-35162 CVE-2025-55742 · GHSA-xr97-25v7-hc2q
UnoPim Stored XSS via SVG MIME/Sanitizer Bypass
Priority HIGH 68
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2024-34980 CVE-2024-52305 · GHSA-cgr4-c233-h733
UnoPim Stored XSS : Cookie hijacking through Create User function
Priority HIGH 68
UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework.
TI-2024-34055 CVE-2024-50637 · GHSA-hv6m-qj65-26q3
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User…
Priority MEDIUM 58
UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function.