Devil's Diary (2007) on Netflix

Plot summary

Dominique and Ursula are teenage friends bullied at their small-town high school by the cheerleaders Heather, Georgia and Lisa. One night in a graveyard, lightning strikes a tombstone and the pair find a blank book with a message inside: it grants power to whoever writes in it, in exchange for their soul. Ursula keeps it, convinced fate led her to it, and writes a wish that Heather's legs be broken. Heather is hurt soon after in what looks like an accident, and Ursula tries to convince a skeptical Dominique that the book is real. Dominique visits the grave of her late father and lives with a mother who works long hours to pay the bills.