CVE-2024-50637

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function

Medium · published November 6, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00406 · 33.7th percentile
Published
2024-11-06T00:00Z
EPSS history
Timeline
  • 06 NOV 00:00Z
    UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function
    cvelistv5