CVE-2026-4972

🗓️ 27 Mar 2026 19:15:22Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 4 Views🌐 WEB

Code-projects Online Reviewer System has a remote cross site scripting flaw in the button functions file.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-4972	27 Mar 202619:15	–	attackerkb
CNNVD	Code-Projects Online Reviewer System 安全漏洞	27 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-4972 code-projects Online Reviewer System btn_functions.php cross site scripting	27 Mar 202619:15	–	cvelist
EUVD	EUVD-2026-16805	27 Mar 202621:31	–	euvd
NVD	CVE-2026-4972	27 Mar 202620:16	–	nvd
Positive Technologies	PT-2026-28697	27 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-4972	28 Mar 202623:09	–	redhatcve
Vulnrichment	CVE-2026-4972 code-projects Online Reviewer System btn_functions.php cross site scripting	27 Mar 202619:15	–	vulnrichment

Vulners

Node

code-projects online_reviewer_systemMatch1.0

[
  {
    "vendor": "code-projects",
    "product": "Online Reviewer System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/ahmadmarz10-hub/CVEsMarz/blob/main/Stored%20Cross-Site%20Scripting%20(XSS)%20in%20Online%20Reviewer%20System%20PHP%20description%20Parameter.md
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
code-projects	www.code-projects.org/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
Description	request body	system/system/students/assessments/databank/btn_functions.php	Cross-site scripting via unsanitized Description argument in btn_functions.php	CWE-79, CWE-94

29 Apr 2026 01:00Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.12.4

CVSS 23.3

CVSS 44.8

CVSS 32.4

EPSS0.00035

SSVC