CVE-2025-55744

low-risk

Published 2025-08-21

UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, some of the endpoints of the application is vulnerable to Cross site Request forgery (CSRF). This vulnerability is fixed in 0.2.1.

Do I need to act?

0.03% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Unopim

Affected Vendors

Webkul

References (2)

Exploit https://drive.proton.me/urls/VXNDKQ4WKR#LpvE777hl8OJ

Exploit https://github.com/unopim/unopim/security/advisories/GHSA-287x-6r2h-f9mw

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal