CVE-2026-77392
SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php saveUser sql injection
CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP 1.0. This impacts the function saveUser of the file /public/submit.php. This manipulation of the argument Researcher causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
| CWE | CWE-89 CWE-74 |
| Vendor | sourcecodester |
| Product | dynamic input field generator using html, css, and php |
| Published | Aug 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for sourcecodester dynamic input field generator using html, css, and php
Be the first to know when new medium vulnerabilities affecting sourcecodester dynamic input field generator using html, css, and php are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
SourceCodester / Dynamic Input Field Generator Using HTML, CSS, and PHP
1.0
References
vuldb.com: https://vuldb.com/vuln/393854 vuldb.com: https://vuldb.com/vuln/393854/cti vuldb.com: https://vuldb.com/cve/CVE-2026-77392 vuldb.com: https://vuldb.com/submit/881045 gist.github.com: https://gist.github.com/rionyxraiza/6b22a5e02da6b8581495761ff7393760 sourcecodester.com: https://www.sourcecodester.com/
Credits
🔍 Aswin K S (VulDB User)