Praskla-Technology assessment-placipy

• CVE-2026-25875 Critical 9.3 PlaciPy Admin Privilege Escalation via Trusted JWT Claims 0.3%
• CVE-2026-25814 Critical 9.3 NoSQL Injection Risk via Unsanitized Query Parameters 0.4%
• CVE-2026-25813 High 8.7 PlaciPy Exposes Sensitive Data via Application Logs 0.3%
• CVE-2026-25812 Critical 9.3 PlaciPy is Missing CSRF Protection on State-Changing Endpoints 0.2%
• CVE-2026-25811 Medium 5.3 PlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure) 0.3%
• CVE-2026-25809 Medium 5.3 PlaciPy Code Execution Allowed Without Assessment Active State Validation 0.4%
• CVE-2026-25806 Medium 5.3 PlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR) 0.2%
• CVE-2026-25810 Medium 5.3 PlaciPy is Missing Object-Level Authorization in student.submission.routes.ts 0.3%
• CVE-2026-25876 Medium 5.3 PlaciPy is Missing Authorization on Assessment Results Endpoint 0.3%
• CVE-2026-25753 Critical 9.3 PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover) 0.4%