Executive brief
UnoPim has CSV Injection on Quick Export feature
Affected products
- Packagist unopim/unopim
Junglewise Threat Intelligence
CVE-2025-55745: UnoPim has CSV Injection on Quick Export feature
CVE-2025-55745 · Severity: medium · CVSS 4 · Published 2025-08-22
Technologies: unopim/unopim (Packagist). Vendors: Packagist.
Related threats
- UnoPim has Broken Access Control
- UnoPim vulnerable to CSRF on Product edit feature and creation of other types
- UnoPim arbitrary file upload in user creation image upload
- UnoPim has Stored Cross-site Scripting vulnerability in user creation functionality
- UnoPim Stored XSS : Cookie hijacking through Create User function