CVE-2026-95957

Name of the Vulnerable Software and Affected Versions SourceCodester Smart Attendance System with QR Code Scanner version 1.0

Description An issue exists in the Self-Registration component within the student signup.php file. Manipulating the full name argument in the prepend() function allows for remote cross-site scripting, a technique where malicious scripts are injected into trusted websites.

Recommendations As a temporary workaround, restrict the use of the full name argument in the student signup.php file until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.