A security vulnerability (CVE-2025-13573) exists in projectworlds version up to 1.0, specifically in the /add_book.php file. The flaw allows remote attackers to manipulate the 'image' argument to perform unrestricted file uploads. This vulnerability has a CVSS score of 6.3, indicating a medium severity level. Public exploit code is available, increasing the risk of exploitation.