A vulnerability was found in code-projects Online Reviewer System 1.0 and classified as critical. This impacts an unknown function of the file /system/system/admins/assessments/pretest/btn_functions.php. Such manipulation of the argument difficulty_id leads to sql injection.
This vulnerability is documented as CVE-2026-2220. The attack can be executed remotely. Additionally, an exploit exists.
