CVE-2026-4971

SourceCodester Note Taking App cross-site request forgery

CVSS 5.3 MEDIUMEPSS 0.2%CWE-352 CWE-862

A weakness has been identified in SourceCodester Note Taking App up to 1.0. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · Note Taking App

public PoCs found — 1

cve_referencegist.github.com/Mohdanass/b7c5984922238397d10644f5f33ec592unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://gist.github.com/Mohdanass/b7c5984922238397d10644f5f33ec592 https://vuldb.com/?ctiid.353858 https://vuldb.com/?id.353858 https://vuldb.com/?submit.777877 https://www.sourcecodester.com/