CVE-2025-32816

CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity...

CVE-2025-32816

creationtimestamp| type| source ---|---|--- 2025-04-11 03:49:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11365 2025-04-11 05:43:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmjcrbyqym2c 2025-04-11 08:04:57+00:00| seen|...

CVE-2025-32816

CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity...

CVE-2025-32816

CodeLit CourseLit before 0.57.5 allows Parameter Tampering via a payment plan associated with the wrong entity...

CVE-2025-32816

CodeLit CourseLit before 0.57.5 is affected. The issue is parameter tampering via a payment plan associated with the wrong entity, caused by the payment plan association logic. Impact is described as low (CVSS 3.1: AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N). Exploitation details are not provided in the...