A vulnerability in SourceCodester Smart Attendance System with QR Code Scanner 1.0 affects the Admin Account Creation component. Specifically, the getMessage function in create_admin.php improperly handles the argument 'e', leading to missing authentication. This flaw can be exploited remotely. Public exploit code has been disclosed. The vulnerability has a high severity score of 7.3 CVSS 3.1.