it's is a p3 bug you check this is bugcrowd vrt(vulnerability-rating-taxonomy)
check some hackerone repots
now lets see how can we find this bug..
first go to your target website and create an account
after login and go to your profile upload an image to your profile
after copy that image like shown in the below image
after copying that image
go to this website : https://jimpl.com/
paste that image url like this
if it's show location and some other sensitive information
if you found like this congrats it's a chance to get paid
some other websites to check exit metadata
https://pics.io/photo-metadata-viewer
thankyou…
JAISHREERAM