A vulnerability was found in code-projects Scholars Tracking System 1.0. It has been classified as critical. This affects an unknown part of the file update_profile_picture.php of the component Endpoint. This manipulation causes unrestricted upload.
This vulnerability is registered as CVE-2025-70151. Remote exploitation of the attack is possible. No exploit is available.
