CVE-2026-95820

Name of the Vulnerable Software and Affected Versions anirbandutta9 College-Notes-Gallery versions up to 8c1cf3d98f30982d069c88ca172612c001eb39f6

Description An unrestricted upload issue exists in the /dashboard/userprofile.php?section=admin1 endpoint. A remote attacker can exploit this by manipulating the image argument, allowing the upload of arbitrary files.

Recommendations Avoid using the image argument in the /dashboard/userprofile.php?section=admin1 endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.