📦 Unopim

This vulnerability allows users without proper delete privileges to bypass access controls and delete products via the mass-delete endpoint in UnoPim. It affects all organizations using UnoPim version...

UnoPim versions before 0.2.1 contain a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts via SVG files at the user creation endpoint. This affects all UnoPim ...

UnoPim versions before 0.2.1 contain CSRF vulnerabilities in some endpoints, allowing attackers to trick authenticated users into performing unintended actions. This affects all UnoPim deployments usi...