UN
Product
unopim
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 5Low 0
Watch
Add unopim to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50637 | 5.4 | Nov 6 | UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function Affected: 0.1.3 |
| CVE-2025-55742 | 4.8 | Aug 21 | UnoPim Stored XSS via SVG MIME/Sanitizer Bypass Affected: < 0.2.1 |
| CVE-2024-52305 | 4.8 | Nov 13 | UnoPim Stored XSS : Cookie hijacking through Create User function Affected: < 0.1.5 |
| CVE-2026-102630 | 4.7 | Sep 29 | UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host Affected: 2.0.0 before 2.0.1; 2.1.0 before 2.1.1 |
| CVE-2025-55744 | 4.3 | Aug 21 | UnoPim vulnerable to CSRF on Product edit feature and creation of other types Affected: < 0.2.1 |
Showing 5