Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item name/description can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7110 A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item. Executing a manipulation of the argument item n… https://www.cve.org/CVERecord?id=CVE-2026-7110
Post summary
A new flaw (CVE‑2026‑7110) was identified in the code‑projects Invoice System, affecting an unspecified function in the /item module, with no proof‑of‑concept, exploit, or patch listed yet.
CVE-2026-7110 Cross Site Scripting in Code-Projects Invoice System Laravel 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7110 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The post announces a CVE-2026-7110 XSS vulnerability in the Code-Projects Invoice System Laravel 1.0, linking to a Vulmon disclosure but offering no PoC, exploit code, or patch details.