CVE-2026-4968

MEDIUM

SourceCodester Diary App diary.php cross-site request forgery

Title source: cna

Description

A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown function of the file diary.php. Executing a manipulation can lead to cross-site request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

References (5)

[Vdb Entry] https://vuldb.com/?id.353855

[Signature, Permissions Required] https://vuldb.com/?ctiid.353855

[Third Party Advisory] https://vuldb.com/?submit.777729

[Exploit] https://gist.github.com/Mohdanass/50a525ba0a72e10fda85f0db11eeed92

[Product] https://www.sourcecodester.com/

Scores

CVSS v3 4.3

EPSS 0.0002

EPSS Percentile 4.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-352 CWE-862

Status published

Products (1)

SourceCodester/Diary App 1.0

Published Mar 27, 2026

Tracked Since Mar 29, 2026