The vulnerability originates in the User Profile Update Handler module of code‑projects Online Reviewer System 1.0. By manipulating the usertype_id parameter, an external actor can cause the system to assign arbitrary object attributes, enabling unauthorized role changes or privilege escalation. This flaw allows the attacker to assume elevated privileges within the application, potentially accessing sensitive data or performing administrative actions beyond their authorized scope.

The affected product is code‑projects Online Reviewer System version 1.0. The vulnerability resides in the file /reviewer/system/system/admins/manage/users/btn_functions.php within the User Profile Update Handler component. No specific sub‑versions beyond 1.0 are known to be affected.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog. The flaw can be triggered remotely, as the vulnerable parameter is exposed to external input. Because the exploit has been publicly disclosed, the likelihood of real‑world exploitation is non‑zero. Attackers who can send crafted requests with a manipulated usertype_id may achieve privilege escalation within the system.