CVE-2025-56747

Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...

CVE-2025-56747

Creativeitem Academy LMS (versions up to and including 5.13 ) contains a privilege escalation vulnerability within the Api_instructor controller. The root cause is a lack of proper role validation , which allows regular authenticated users to access functions reserved exclusively for instructors....