CVE-2026-125077: SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgery
Published Nov 9, 2026
·Updated
A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected Software
1 affected component
Sourcecodester Smart Attendance System with QR Code Scanner=1.0
Event History
Nov 9, 2026
CVE Published
via MITRE·11:45 PM
Data Sourced
via MITRE·11:45 PM
DescriptionSeverityWeakness
Nov 10, 2026
Data Sourced
via NVD·12:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attack can be launched remotely and does not require prior privileges, but it requires user interaction. An exploit has been publicly disclosed.
2
Who is exposed to this vulnerability?
Deployments of SourceCodester Smart Attendance System with QR Code Scanner version 1.0 are identified as affected. The available information does not identify the specific vulnerable function or any configuration conditions.