Projectworlds Online Notes Sharing Platform vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Projectworlds Online Notes Sharing Platform: 1 record(s), with affected versions and fixes.
cpe:2.3:a:projectworlds:online_notes_sharing_platform

CVE-2025-12862 Critical · 9.8 CWE-434 Nov 7, 2025

projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.