EIP-2026-108924

This exploit demonstrates an admin function execution vulnerability in Jorp v-1.3.05.09, allowing unauthenticated users to delete projects or tasks by manipulating GET parameters 'x' and 'y'. The vulnerability lies in the 'functions.php' file, where these parameters are directly used to call delete functions without proper authentication checks.