What’s Vulnerable › Products

Praskla-Technology assessment-placipy vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your Praskla-Technology assessment-placipy version is affected

Latest Praskla-Technology assessment-placipy vulnerabilities

• CVE-2026-25875 — PlaciPy Admin Privilege Escalation via Trusted JWT Claims (CVSS 9.8)
• CVE-2026-25814 — NoSQL Injection Risk via Unsanitized Query Parameters (CVSS 9.8)
• CVE-2026-25813 — PlaciPy Exposes Sensitive Data via Application Logs (CVSS 7.5)
• CVE-2026-25812 — PlaciPy is Missing CSRF Protection on State-Changing Endpoints (CVSS 8.8)
• CVE-2026-25811 — PlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure) (CVSS 9.1)
• CVE-2026-25876 — PlaciPy is Missing Authorization on Assessment Results Endpoint (CVSS 9.1)
• CVE-2026-25810 — PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts (CVSS 9.1)
• CVE-2026-25809 — PlaciPy Code Execution Allowed Without Assessment Active State Validation (CVSS 9.8)
• CVE-2026-25806 — PlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR) (CVSS 6.5)
• CVE-2026-25753 — PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) (CVSS 9.8)