A vulnerability labeled as critical has been found in code-projects Online Music Site 1.0. Affected by this issue is some unknown functionality of the file /Administrator/PHP/AdminAddAlbum.php. The manipulation of the argument txtimage results in unrestricted upload.
This vulnerability was named CVE-2026-2213. The attack may be performed from remote. In addition, an exploit is available.
