Ghostwire

CVE-2026-7091: A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user...

MEDIUM CVSS 6.3 Exploit Available

Published: April 27, 2026 | Last Modified: April 27, 2026

Description

A flaw has been found in code-projects Invoice System in Laravel 1.0. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References