← Database

CVE-2025-12868

CRITICAL CVSS: 9.8 Published: 2025-11-10 Modified: 2026-06-17

Description

New Site Server developed by CyberTutor has a Use of Client-Side Authentication vulnerability, allowing unauthenticated remote attackers to modify the frontend code to gain administrator privileges on the website.

Affected Platforms

Unknown

Weakness Type

CWE-603

References