CVE-2026-4972 in Online Reviewer Systeminformation

Résumé

par MITRE • 27/03/2026

A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0. Affected is an unknown function of the file /system/system/students/assessments/databank/btn_functions.php. Such manipulation of the argument Description leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsable

VulDB

Divulgation

27/03/2026

Modérer

accepté

Entrée

VDB-353859

CPE

prêt

Exploitation

Télécharger

EPSS

0.00202

KEV

non

Activités

très faible

Sources

Want to know what is going to be exploited?

We predict KEV entries!