https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T03:03:43.827970+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2024-50637 fkie_cve-2024-50637 2026-10-06T03:03:43.922311+00:00

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.

 https://vulnerability.circl.lu/vuln/ghsa-hv6m-qj65-26q3 GHSA-hv6m-qj65-26q3 — UnoPim Cross-site Scripting vulnerability 2026-10-06T03:03:43.922441+00:00

Affected: Packagist: unopim/unopim

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function.

The vulnerability allows attackers to perform XSS in SVG file extension, which can be used to stealing cookies.