A vulnerability was found in code-projects Simple Food Ordering System 1.0. It has been declared as critical. Impacted is an unknown function of the file /editproduct.php. Such manipulation of the argument photo leads to unrestricted upload.
This vulnerability is uniquely identified as CVE-2025-12301. The attack can be launched remotely. Moreover, an exploit is present.
