CVE-2026-25812: Prasklatechnology Placipy

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application enables credentialed CORS requests but does not implement any CSRF protection mechanism.

Affected products

Published 2026-02-09. Last modified 2026-06-17.