A vulnerability categorized as problematic has been discovered in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting.
This vulnerability is listed as CVE-2026-4972. The attack may be performed from remote. In addition, an exploit is available.
