CVE-2026-77391 in Dynamic Input Field Generator Using HTML, CSS, and PHP

Summary

by MITRE • 08/21/2026

A security flaw has been discovered in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This affects an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsible: VulDB
• Disclosure: 08/21/2026
• Moderation: accepted
• Entry: VDB-393853
• CPE: ready
• CWE: CWE-352 (confirmed)
• Exploit: Download
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Telecommunication, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-77391
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-77391
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-77391/