CVE-2026-77391

MediumCVSS 4.3

Published: 21/08/2026(UTC)Updated: 24/08/2026(UTC)Translated: 21/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0, allowing cross-site request forgery. The attack can be launched remotely, and the exploit has been publicly released.

Risk Assessment

The organization may face unauthorized actions in the application if a user visits a malicious page.

Recommendation

Apply available patches or upgrade to a newer version immediately, and implement CSRF protections.

Other vulnerabilities in SourceCodester Dynamic Input Field Generator

CVE-2026-77392Medium
A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. Manipulation of the argument Researcher causes SQL injection. The attack may be initiated remotely. The exploit has been made public and could be used for attacks.

Original NVD description (English source)

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.