A vulnerability identified as problematic has been detected in ProjectSend r2002. This vulnerability affects unknown code of the file upload.php. Performing a manipulation results in cross-site request forgery.

This vulnerability was named CVE-2026-5624. The attack may be initiated remotely. In addition, an exploit is available.

You should upgrade the affected component.