CVE-2025-55744

6.9 mediumEPSS 0.2%

Medium (6.9) in webkul unopim. EPSS 0.2% chance of exploitation in the next 30 days.

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2025-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

webkul:unopim

References

https://drive.proton.me/urls/VXNDKQ4WKR#LpvE777hl8OJ
https://github.com/unopim/unopim/security/advisories/GHSA-287x-6r2h-f9mw

Check your stack JSON