Privilege Escalation Vulnerability in Creativeitem Academy LMS by Creativeitem

CVE-2025-56747

What is CVE-2025-56747?

The Creativeitem Academy LMS software version 5.13 and earlier is impacted by a privilege escalation vulnerability located in the Api_instructor controller. This issue allows authenticated users, without proper role validation, to gain access to instructor-only functions, leading to potential unauthorized course creation and management. This flaw poses significant risks as it undermines the intended access controls necessary for maintaining the integrity of course content and instructor permissions.

References