CVE-2026-77392

Name of the Vulnerable Software and Affected Versions SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP version 1.0

Description A remote SQL injection exists in the saveUser() function within the /public/submit.php endpoint. This issue occurs when the Researcher argument is manipulated, allowing an attacker to interfere with the database queries.

Recommendations Update SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP version 1.0 to a version that contains a fix. As a temporary workaround, restrict access to the /public/submit.php endpoint or avoid using the Researcher argument until a patch is applied.