CVE-2026-127282Medium· 4.3▾ SunlitA vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file reset_password.php. This manipulation of the argument Username caus…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file reset_password.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
smart_attendance_system_with_qr_code_scanner 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-95957Medium· 4.3A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0
CVE-2026-124570Low· 2.4SourceCodester Online Leave Management System Employee Avatar Upload Extension Master.php cross site scripting
CVE-2026-122190Low· 2.4SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting
CVE-2026-112096Low· 3.5SourceCodester Inventory System Purchase Records transactions_handler.php save_purchase cross site scripting
CVE-2026-112095Low· 3.5SourceCodester Inventory System Product Management products_handler.php save cross site scripting
CVE-2026-112097Low· 3.5SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting