CVE-2025-62779

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - security-advisories@github.com

Published

2025-10-27

Last modified

2026-10-08

Weaknesses

CWE-79

Affected products

• Learning (Frappe)
• Lms (Frappe)

References

• https://github.com/frappe/lms/security/advisories/GHSA-j6h8-qg65-3fpx
• https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3