CVE-2026-4972 in code-projects Online Reviewer System
Summary
A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Disclosure
03/27/2026
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 353859 | code-projects Online Reviewer System btn_functions.php cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2026-4972 |