Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-25812

PlaciPy is Missing CSRF Protection on State-Changing Endpoints

Description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Praskla-Technology assessment-placipy

  • = 1.0.0affected

References