CVE-2026-95924

Name of the Vulnerable Software and Affected Versions SourceCodester Online Reviewer Management System version 1.0

Description An issue exists where the manipulation of the difficulty id variable in the '/reviewer 0/admins/assessments/databank/btn functions.php?action=add' endpoint allows for SQL injection. This allows remote attackers to execute unauthorized database queries.

Recommendations As a temporary workaround, avoid using the difficulty id parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.