A vulnerability in SourceCodester Smart Attendance System with QR Code Scanner 1.0 allows remote attackers to bypass authentication by manipulating the student_code argument in the JSON endpoint api/attendance_handler.php. The flaw has a CVSS score of 7.3, indicating high severity, and public exploit code is available.