Threats tagged 'ghsa-wqwv-2j54-cp38'

SourceCodester Photo Share Website 1.0 contains a vulnerability in the /social/ajax.php?action=save_upload endpoint. The flaw involves manipulation of the img[] or imgName[] parameters, allowing unrestricted file upload. This vulnerability can be exploited remotely and has publicly disclosed exploit code. The CVSS score is 6.3, indicating a medium severity risk.