Vendor
Changeweb Unifiedtransform version 2.0 contains an incorrect access control vulnerability allowing unprivileged users to modify student records via the /students/edit/{id} endpoint.