unopim — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in unopim, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-102630	UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host CWE-348	4.7	Medium	2026-09-29
CVE-2026-85395	UnoPim before 2.1.3 Missing Authorization on Integration Management Routes CWE-862	7.1	High	2026-09-03
CVE-2026-82524	UnoPim File Upload RCE via TinyMCE Image Upload Endpoint CWE-434	7.2	High	2026-09-02
CVE-2025-55745	UnoPim Quick Export feature is vulnerable to CSV injection CWE-1236	8.8^AI	High ^AI	2025-08-22
CVE-2025-55741	unopim/unopim allows unauthorized product deletion via mass-delete endpoint CWE-284	8.1	High	2025-08-22
CVE-2025-55744	UnoPim vulnerable to CSRF on Product edit feature and creation of other types CWE-352	8.8^AI	High ^AI	2025-08-21
CVE-2025-55743	UnoPim vulnerable to remote code execution through Arbitrary File upload CWE-434	8.1^AI	High ^AI	2025-08-21
CVE-2025-55742	UnoPim Stored XSS via SVG MIME/Sanitizer Bypass CWE-79	8.0	High	2025-08-21
CVE-2024-52305	UnoPim Stored XSS : Cookie hijacking through Create User function CWE-616	6.5	Medium	2024-11-13

All 9 known CVE vulnerabilities affecting unopim with full Chinese analysis, references, and POCs where available.