QwikSec

Security Database

CVE

CWE

Training

CVE-2026-25809

Published: Feb 9, 2026

Modified: Feb 10, 2026

PUBLISHED

Description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission window is currently open.

Vendor	Product	Versions
Praskla-Technology	assessment-placipy	affected `= 1.0.0`

Weaknesses (CWE)

References

https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-cc32-rp29-w9x7

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.