A vulnerability was found in code-projects Online Reviewer System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scripting.
This vulnerability appears as CVE-2026-2222. The attack may be performed from remote. In addition, an exploit is available.
