Campcodes Retro Basketball Shoes Online Store version 1.0 contains a vulnerability in the /admin/admin_product.php file where manipulation of the product_image argument can lead to unrestricted file upload. This flaw can be exploited remotely and has publicly available exploit code. The vulnerability has a medium severity rating with a CVSS score of 4.7.