Priority LOW 10
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
Vulnerabilities
22 records
TI-2026-28397 CVE-2026-39415
Frappe Learning Management System has Client-Side Manipulation of Quiz Scores
Priority LOW 30
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2026-26853 CVE-2026-34606
Stored XSS in Frappe LMS
Priority LOW 36
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2026-21456 CVE-2026-26977
Frappe Learning Management System exposes details of unpublished courses to unauthorized users
Priority LOW 36
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2026-21045 CVE-2026-26031
Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students
Priority LOW 13
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2026-18930 CVE-2026-23497
Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pages
Priority LOW 7
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
Priority LOW 22
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2025-41426 CVE-2025-67730
Frappe authenticated users can execute XSS through form description fields
Priority LOW 22
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
Priority LOW 7
Frappe Learning Management System (LMS) is a learning system that helps users structure their content.
TI-2025-40053 CVE-2025-64707
Frappe LMS revoking access did not show immediate effect as roles were cached
Priority LOW 7
Frappe Learning is a learning system that helps users structure their content.
Priority LOW 8
Frappe Learning is a learning system that helps users structure their content.
TI-2025-38962 CVE-2025-62779
Frappe Learning users were able to add HTML through input fields in the Job Form
Priority LOW 7
Frappe Learning is a learning system that helps users structure their content.
Priority LOW 7
Frappe Learning is a learning management system.
TI-2025-38480 CVE-2025-62158
Frappe had attachments made by students to their assignments of type Text set to public
Priority LOW 13
Frappe Learning is a learning system that helps users structure their content.
TI-2025-10331 CVE-2025-11283 · GHSA-2p83-x3q3-65cc
Frappe LMS Course cross site scripting
Priority MEDIUM 55
A vulnerability was determined in Frappe LMS 2.35.0.
TI-2025-10330 CVE-2025-11282 · GHSA-57c3-6898-289j
Frappe LMS Incomplete Fix CVE-2025-55006 cross site scripting
Priority MEDIUM 55
A vulnerability was found in Frappe LMS 2.34.x/2.35.0.
TI-2025-10329 CVE-2025-11281 · GHSA-4jjv-8wpj-wqfg
Frappe LMS Unpublished Course courses access control
Priority MEDIUM 45
A vulnerability has been found in Frappe LMS 2.35.0.
TI-2025-10328 CVE-2025-11280 · GHSA-v97w-vr8h-fvmm
Frappe LMS Assignment Picture files direct request
Priority MEDIUM 61
A flaw has been found in Frappe LMS 2.35.0.
TI-2025-36968 CVE-2025-59415
Frappe Learning vulnerable to Malicious Content upload via Profile bio field
Priority LOW 24
Frappe Learning is a learning system that helps users structure their content.
TI-2025-34709 CVE-2025-55006
Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature
Priority LOW 38
Frappe Learning is a learning system that helps users structure their content.
TI-2023-05113 CVE-2023-5555 · GHSA-c447-v5h5-vwxf
Cross-site Scripting (XSS) - Generic in frappe/lms
Priority MEDIUM 60
Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.
TI-2023-22898 CVE-2023-42807 · GHSA-m47x-32hh-m2m6
Frappe LMS SQL Injection Issue on People Page
Priority MEDIUM 42
Frappe LMS is an open source learning management system.