Medium severity4.7NVD Advisory· Published Apr 28, 2026· Updated Apr 29, 2026

CVE-2026-7238

Description

A flaw has been found in code-projects Online Music Site 1.0. This affects an unknown part of the file /Administrator/PHP/AdminUpdateAlbum.php. This manipulation of the argument txtimage causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has been published and may be used.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Patches

Vulnerability mechanics

References

code-projects.orgnvd
github.com/gtxy114514/CVE/issues/4nvd
vuldb.com/submit/802840nvd
vuldb.com/vuln/359846nvd
vuldb.com/vuln/359846/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000