CVE-2025-56747: Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Api_instructor co

Creativeitem Academy LMS version 5.13 and earlier has a privilege escalation vulnerability (a security flaw where users gain unauthorized higher-level permissions) in the Api_instructor controller that allows regular authenticated users to access functions meant only for instructors without proper role validation (checks that verify what a user is allowed to do). This could let unauthorized users create and manage courses.