CVE-2026-7092 | code-projects Invoice System in Laravel 1.0 Profile /profile/ ID improper authorization

A vulnerability was found in code-projects Invoice System in Laravel 1.0. It has been declared as critical. Affected is an unknown function of the file /profile/ of the component Profile Handler. Such manipulation of the argument ID leads to improper authorization.

This vulnerability is documented as CVE-2026-7092. The attack can be executed remotely. Additionally, an exploit exists.