PT-2026-35389 · Code Projects · Invoice System In Laravel

C4Ttr4Ck · Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-7110

Mitre

CVSS v3.1

3.5

Low

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.

Exploit

Fix

Code Injection

XSS

Weakness Enumeration

CWE-94

CWE-79

Related Identifiers

CVE-2026-7110

Affected Products

Invoice System In Laravel

References · 6

• 🔥 https://gist.github.com/higordiego/dd7f841bbd1b8b951434511d044f7c6e · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-7110 · Security Note
• https://vuldb.com/vuln/359711/cti · Note
• https://code-projects.org · Note
• https://vuldb.com/vuln/359711 · Note
• https://vuldb.com/submit/800693 · Note