CVE-2026-4968

A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown function of the file diary.php. Executing a manipulation can lead to cross-site request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Score

CVSS 4.0 5.3 Medium

Status

Deferred - cna@vuldb.com

Published

2026-03-27

Last modified

2026-10-26

Weaknesses

CWE-352, CWE-862

Affected products

• Diary App (Sourcecodester)

References

• https://vuldb.com/?id.353855
• https://vuldb.com/?ctiid.353855
• https://vuldb.com/?submit.777729
• https://gist.github.com/Mohdanass/50a525ba0a72e10fda85f0db11eeed92
• https://www.sourcecodester.com/