A security flaw in SourceCodester Smart Attendance System with QR Code Scanner 1.0 allows remote attackers to perform session fixation via manipulation in login.php. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code is available.