CVE-2026-86226

Name of the Vulnerable Software and Affected Versions Projectwolds Online Attendance System version 1.0

Description A remote cross-site scripting issue exists in the profile.php file. The flaw allows for the manipulation of the email variable to execute malicious scripts in the context of the user's browser.

Recommendations As a temporary workaround, restrict access to the profile.php file or avoid using the email parameter until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.