CVE-2025-25615

Description

References

• armaansidana2003/CVE-2025-25615 · Third Party Advisory
• changeweb/Unifiedtransform · Product

More vulnerabilities in unifiedtransform

• CVE-2025-46204MEDIUM 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /course/edit/{id} endpoint.
• CVE-2025-46203MEDIUM 6.5An issue in Unifiedtransform v2.0 allows a remote attacker to escalate privileges via the /students/edit/{id} endpoint.
• CVE-2025-25621MEDIUM 4.3Unifiedtransform 2.0 is vulnerable to Incorrect Access Control, which allows teachers to take attendance of fellow teachers. This affected e…
• CVE-2025-25618LOW 3.3Incorrect Access Control in Unifiedtransform 2.0 leads to Privilege Escalation allowing the change of Section Name and Room Number by Teache…
• CVE-2025-25620MEDIUM 5.4Unifiedtransform 2.0 is vulnerable to Cross Site Scripting (XSS) in the Create assignment function.