A vulnerability in SourceCodester Smart Attendance System with QR Code Scanner 1.0 affects the password reset functionality. The flaw involves manipulation of username or password parameters in the reset_password.php component, leading to weak password recovery. This vulnerability can be exploited remotely. Public exploit code is available. The CVSS score is 7.3, indicating high severity.