CVE-2026-7108

code-projects Invoice System in Laravel cross-site request forgery

CVSS 5.3 MEDIUMEPSS 0.2%CWE-352 CWE-862

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Affected products

code-projects · Invoice System in Laravel

public PoCs found — 1

cve_referencegist.github.com/higordiego/e25a1bb5cf93ffbda2e80b6cbc031a8bunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://code-projects.org/https://gist.github.com/higordiego/e25a1bb5cf93ffbda2e80b6cbc031a8b https://vuldb.com/submit/800691 https://vuldb.com/vuln/359709 https://vuldb.com/vuln/359709/cti