CVE-2026-127282: SourceCodester Smart Attendance System with QR Code Scanner reset_password.php cross site scripting
Published Nov 13, 2026
·Updated
A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected by this vulnerability is an unknown functionality of the file resetpassword.php. This manipulation of the argument Username causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Event History
Nov 13, 2026
CVE Published
via MITRE·01:30 AM
Data Sourced
via MITRE·01:30 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:18 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The attack can be carried out remotely and does not require privileges, but it requires user interaction. The vulnerable input is the Username argument handled by reset_password.php.
2
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used by attackers.