CVE-2026-95957 in Smart Attendance System with QR Code Scanner

Prediction

by VulDB Data Team • 09/22/2026

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This issue affects the function prepend of the file student_signup.php of the component Self-Registration. Performing a manipulation of the argument full_name results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-408556
• CPE: ready
• CWE: CWE-79 (confirmed)
• Exploit: Download
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-95957
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-95957
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-95957/