Vulnerability · Published Aug 21, 2026 · Assigned by VulDB

CVE-2026-77391SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery

Medium 4.3

In plain English

A medium-severity cross-site request forgery in Dynamic Input Field Generator Using HTML, CSS, and PHP from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium

Exploit odds (30 days)0.2%top 86.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products (as reported)

Vendor	Product	Versions
SourceCodester	Dynamic Input Field Generator Using HTML, CSS, and PHP	1.0

Weakness: CWE-352, CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R

References

VDB-393853 | SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery vdb-entry
VDB-393853 | CTI Indicators (IOB, IOC) signature, permissions-required
CVE-2026-77391 | CVE Analysis and Report third-party-advisory
Submit #881030 | SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP N/A Cross-Site Request Forgery third-party-advisory
https://gist.github.com/rionyxraiza/428d4481fe471704829ca06de7be9d8c exploit
https://www.sourcecodester.com/ product