CVE-2026-77391: SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery
A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attack can be launched remotely and requires user interaction. No attacker privileges are required, and a public exploit is available.
What is the likely security impact?
The reported impact is limited to integrity: an attacker may be able to cause unauthorized state-changing requests through a victim’s browser. No confidentiality or availability impact is reported.
Are default deployments known to be affected?
The available information identifies version 1.0 as affected, but does not state whether the vulnerable functionality is enabled or reachable in a default deployment.