Frappe Learning vulnerabilities

• frappe learning, lms +1 more Frappe LMS: HTML injection in user-controlled metadata CVE-2026-46546 2.1 LowJune 9, 2026
• frappe learning, lms +1 more Frappe Learning Management System has Client-Side Manipulation of Quiz Scores CVE-2026-39415 5.3 MediumApril 8, 2026
• frappe learning, lms +1 more Stored XSS in Frappe LMS CVE-2026-34606 6.9 MediumApril 2, 2026
• frappe learning, lms +1 more Frappe Learning Management System exposes details of unpublished courses to unauthorized users CVE-2026-26977 6.9 MediumFebruary 20, 2026
• frappe learning, lms +1 more Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students CVE-2026-26031 1.3 LowFebruary 11, 2026
• frappe learning, lms +1 more Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pages CVE-2026-23497 1.3 LowJanuary 14, 2026
• frappe learning, lms +1 more Frappe Authenticated Users can Execute JavaScript through its Job Form CVE-2025-67734 5.1 MediumDecember 12, 2025
• frappe learning, lms +1 more Frappe authenticated users can execute XSS through form description fields CVE-2025-67730 Public exploit 5.1 MediumDecember 12, 2025
• frappe learning, lms +1 more Frappe LMS is Missing Server-Side Authorization in Business Logic CVE-2025-66581 1.3 LowDecember 5, 2025
• frappe learning, lms +1 more Frappe LMS revoking access did not show immediate effect as roles were cached CVE-2025-64707 1.2 LowNovember 12, 2025
• frappe learning, lms +1 more Frappe user was able to access the submission of other students CVE-2025-64705 1.3 LowNovember 12, 2025
• frappe learning, lms +1 more Frappe Learning users were able to add HTML through input fields in the Job Form CVE-2025-62779 1.2 LowOctober 27, 2025
• frappe learning, lms +1 more Frappe Learning allowed students to access the Quiz Form via direct URL CVE-2025-62778 1.3 LowOctober 27, 2025
• frappe learning, lms +1 more Frappe had attachments made by students to their assignments of type Text set to public CVE-2025-62158 2.7 LowOctober 10, 2025
• frappe lms, learning +1 more Frappe LMS Course cross site scripting CVE-2025-11283 4.8 MediumOctober 5, 2025
• frappe lms, learning +1 more Frappe LMS Unpublished Course courses access control CVE-2025-11281 2.3 LowOctober 5, 2025
• frappe lms, learning +1 more Frappe LMS Assignment Picture files direct request CVE-2025-11280 6.3 MediumOctober 5, 2025
• frappe learning, lms +1 more Frappe Learning vulnerable to Malicious Content upload via Profile bio field CVE-2025-59415 4.6 MediumSeptember 17, 2025
• frappe lms, learning +1 more Frappe LMS Incomplete Fix CVE-2025-55006 cross site scripting CVE-2025-11282 4.8 MediumAugust 9, 2025
• frappe learning, lms +1 more Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature CVE-2025-55006 4.3 MediumAugust 9, 2025
• frappe frappe/lms, learning +1 more Cross-site Scripting (XSS) - Generic in frappe/lms CVE-2023-5555 7.1 HighOctober 12, 2023
• frappe learning, lms +1 more Frappe LMS SQL Injection Issue on People Page CVE-2023-42807 6.3 MediumSeptember 21, 2023