CVE-2025-9241 MEDIUM

CVE-2025-9241: elunez eladmin exportUser csv injection

Vendor Elunez
Product eladmin
Weakness CWE-1236
Published August 20, 2025
Last update August 20, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A weakness has been identified in elunez eladmin up to 2.7. This affects the function exportUser. This manipulation causes csv injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

Key dates

02Disclosure timeline

August 20, 2025 CVE published
August 20, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-23286 Security issues in Eaton Intelligent Power Manager Infrastructure CVE-2026-41073 RT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps CVE-2021-1475 Cisco Umbrella Link and CSV Formula Injection Vulnerabilities CVE-2025-67851 Moodle: moodle: formula injection allows arbitrary formula execution via unescaped data export CVE-2025-14229 SourceCodester Inventory Management System SVC Report Export csv injection