CVE-2026-94048

CodeAstro QR Code Attendance Management System 1.0 is affected by an improper privilege management vulnerability in the Save function of app/Controllers/UserController.php. Manipulation of the role_id argument allows a remote, authenticated user with high privileges to escalate access, with a sco...