CVE-2025-13411 is a vulnerability in Campcodes Retro Basketball Shoes Online Store 1.0 affecting the /admin/admin_football.php file. It allows remote attackers with high privileges to perform unrestricted file uploads via manipulation of the product_image argument. The vulnerability has a medium severity score of 4.7 and public exploit code is available.