CVE-2026-25812 — PlaciPy is Missing CSRF Protection on State-Changing Endpoints
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any C…
Published: 2026-02-09 · CVSS: 9.3 · CVSS 4.0
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7