Smart Attendance System With Qr Code Scanner
Monthly
Cross-site scripting in SourceCodester Smart Attendance System with QR Code Scanner 1.0 lets unauthenticated remote attackers inject arbitrary JavaScript through the full_name parameter of the Self-Registration page (student_signup.php), which then executes in the browser of any user or administrator who renders the affected name. Publicly available exploit code exists, but there is no confirmation of active exploitation. Impact is confined to the victim's browser context - session token theft, defacement, or redirection - with no server-side compromise, and the product is a niche hobby-grade PHP application with essentially no production deployment.
Cross-site scripting in SourceCodester Smart Attendance System with QR Code Scanner 1.0 lets unauthenticated remote attackers inject arbitrary JavaScript through the full_name parameter of the Self-Registration page (student_signup.php), which then executes in the browser of any user or administrator who renders the affected name. Publicly available exploit code exists, but there is no confirmation of active exploitation. Impact is confined to the victim's browser context - session token theft, defacement, or redirection - with no server-side compromise, and the product is a niche hobby-grade PHP application with essentially no production deployment.