This vulnerability affects CodeAstro Online Job Portal 1.0 and allows an attacker to perform unrestricted file uploads by manipulating the Name argument in the /users/update-profile.php file. The flaw can be exploited remotely without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 5.3, indicating medium severity. Although exploit code is publicly available, there is no vendor advisory or patch currently documented, and the remediation level is unknown.

Successful exploitation could allow an attacker to upload arbitrary files to the server, potentially leading to further compromise such as remote code execution or unauthorized access depending on the server configuration. The vulnerability requires only network access and no user interaction, increasing its risk. However, the CVSS vector indicates low to limited impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, it is recommended to implement strict file upload validation and filtering, restrict upload permissions, and monitor for suspicious activity related to file uploads. Avoid exposing the vulnerable endpoint to untrusted networks if possible.