CVE-2026-7108 - code-projects Invoice System in Laravel cross-site request forgery

Back Back to CVE browser

MEDIUM

code-projects Invoice System in Laravel cross-site request forgery

Published Apr 27, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 0.22%

Description

A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0. This affects an unknown function. Such manipulation leads to cross-site request forgery. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Affected products

Vendor Code-Projects Product Invoice System in Laravel Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Code-Projects

Invoice System in Laravel

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-352

CSRF

CWE-862

Missing Authorization

References (5)

https://code-projects.org/
product
https://gist.github.com/higordiego/e25a1bb5cf93ffbda2e80b6cbc031a8b
exploit
https://vuldb.com/submit/800691
third-party-advisory
https://vuldb.com/vuln/359709
vdb-entry
https://vuldb.com/vuln/359709/cti
signaturepermissions-required

Link	Providers	Tags
https://code-projects.org/		product
https://gist.github.com/higordiego/e25a1bb5cf93ffbda2e80b6cbc031a8b		exploit
https://vuldb.com/submit/800691		third-party-advisory
https://vuldb.com/vuln/359709		vdb-entry
https://vuldb.com/vuln/359709/cti		signaturepermissions-required