SOURCECODESTER SMART ATTENDANCE SYSTEM WITH QR CODE SCANNER · CVE-2026-127282 · Other
NO FIX YET
The Username argument in reset_password.php of SourceCodester Smart Attendance System with QR Code Scanner 1.0 is not sanitized, enabling cross-site scripting. A remote attacker can run script in the browser of a user who opens a crafted link, which can be used to steal session data or act as that user.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running the SourceCodester Smart Attendance System with QR Code Scanner 1.0 web application that exposes reset_password.php to users. The sources do not say whether a fixed version exists or whether any configuration changes the exposure.
Not affected if not-internet-exposed, other-version
Who cares attendance-system, php, self-hosted
SourceCodester Smart Attendance System with QR Code Scanner version 1.0 by reviewing the installed code.reset_password.php and check whether the Username parameter is output without encoding.No fix yet, per the sources.
A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file reset_password.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.