CVE-2025-12862 | projectworlds Online Notes Sharing Platform 1.0 userprofile.php image unrestricted upload

A vulnerability, which was classified as critical, was found in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload.

This vulnerability is listed as CVE-2025-12862. The attack may be performed from remote. In addition, an exploit is available.VulDB Recent EntriesRead More