Threats tagged 'ghsa-55pf-pmc3-888g'

A high-severity vulnerability exists in oretnom23 php-travel-agency-system in the admin/employee_insert.php file. It allows remote attackers to perform unrestricted file uploads by manipulating the employee photo argument. The vulnerability has a CVSS score of 7.3 and an exploit has been publicly disclosed. The project has been informed but has not yet responded or issued a fix.