Learning (Frappe) - vulnerabilities (CVEs)
22 CVEs, 0 in the last 30 days, 67 known versions, newest CVE from 2026-06-10. Vendor: Frappe.
CVEs of Learning
- CVE-2026-46546 - CVSS 5.4 (medium), 2026-06-10: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could…
- CVE-2026-39415 - CVSS 5.3 (medium), 2026-04-08: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.46.0, a vulnerability has been identified in…
- CVE-2026-34606 - CVSS 6.9 (medium), 2026-04-02: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe…
- CVE-2026-26977 - CVSS 6.9 (medium), 2026-02-20: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are…
- CVE-2026-26031 - CVSS 5.3 (medium), 2026-02-11: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in…
- CVE-2026-23497 - CVSS 5.4 (medium), 2026-01-14: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and earlier, there is a stored XSS…
- CVE-2025-67734 - CVSS 5.4 (medium), 2025-12-12: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allowed authenticated…
- CVE-2025-67730 - CVSS 5.4 (medium), 2025-12-12: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to…
- CVE-2025-66581 - CVSS 6.5 (medium), 2025-12-05: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.41.0, a flaw in the server-side…
- CVE-2025-64707 - CVSS 5.4 (medium), 2025-11-12: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, when admins revoked a…
- CVE-2025-64705 - CVSS 4.3 (medium), 2025-11-12: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to version 2.41.0, users were able to…
- CVE-2025-62779 - CVSS 5.4 (medium), 2025-10-27: Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through…
- CVE-2025-62778 - CVSS 5.3 (medium), 2025-10-27: Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the…
- CVE-2025-62158 - CVSS 5.3 (medium), 2025-10-10: Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by…
- CVE-2025-11283 - CVSS 4.8 (medium), 2025-10-05: A vulnerability was determined in Frappe LMS 2.35.0. This affects an unknown function of the component Course Handler. Executing manipulation of the argument…
- CVE-2025-11282 - CVSS 6.1 (medium), 2025-10-05: A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing…
- CVE-2025-11281 - CVSS 5 (medium), 2025-10-05: A vulnerability has been found in Frappe LMS 2.35.0. The affected element is an unknown function of the file /courses/ of the component Unpublished Course…
- CVE-2025-11280 - CVSS 6.3 (medium), 2025-10-05: A flaw has been found in Frappe LMS 2.35.0. Impacted is an unknown function of the file /files/ of the component Assignment Picture Handler. This manipulation…
- CVE-2025-59415 - CVSS 5.4 (medium), 2025-09-17: Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe…
- CVE-2025-55006 - CVSS 8.8 (high), 2025-08-09: Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately…
- CVE-2023-5555 - CVSS 7.1 (high), 2023-10-12: Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.
- CVE-2023-42807 - CVSS 9.8 (critical), 2023-09-21: Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The…
