Frappe LMS

• CVE-2026-61806 Medium 5.3 Frappe LMS allows unpublished certificate access 0.2%
• CVE-2026-61805 Medium 5.3 Frappe LMS: Quiz result manipulation and cross-user submission forgery 0.2%
• CVE-2026-61803 Medium 5.3 Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amount 0.2%
• CVE-2026-39375 Medium 5.1 Frappe LMS has Stored XSS in Course Meta 0.3%
• CVE-2026-54343 High 8.7 Frappe LMS: Path Traversal in SCORM File Serving 0.7%
• CVE-2026-39385 High 7.1 Frappe LMS enrollment bypass in paid courses via unrelated batch 0.4%
• CVE-2026-46546 Low 2.1 Frappe LMS: HTML injection in user-controlled metadata 0.1%
• CVE-2026-39405 Critical 9.4 Frappe has Path Transversal via SCORM 0.3%
• CVE-2026-39415 Medium 5.3 Frappe Learning Management System has Client-Side Manipulation of Quiz Scores 0.3%
• CVE-2026-34606 Medium 6.9 Stored XSS in Frappe LMS 0.2%
• CVE-2026-26977 Medium 6.9 Frappe Learning Management System exposes details of unpublished courses to unauthorized users 0.3%
• CVE-2026-26031 Low 1.3 Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students 0.2%
• CVE-2026-23497 Low 1.3 Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pages 0.2%
• CVE-2025-67734 Medium 5.1 Frappe Authenticated Users can Execute JavaScript through its Job Form 0.2%
• CVE-2025-67730 Medium 5.1 Frappe authenticated users can execute XSS through form description fields 0.2%
• CVE-2025-66581 Low 1.3 Frappe LMS is Missing Server-Side Authorization in Business Logic 0.2%
• CVE-2025-64707 Low 1.2 Frappe LMS revoking access did not show immediate effect as roles were cached 0.2%
• CVE-2025-64705 Low 1.3 Frappe user was able to access the submission of other students 0.2%
• CVE-2025-62779 Low 1.2 Frappe Learning users were able to add HTML through input fields in the Job Form 0.2%
• CVE-2025-62778 Low 1.3 Frappe Learning allowed students to access the Quiz Form via direct URL 0.2%
• CVE-2025-62158 Low 2.7 Frappe had attachments made by students to their assignments of type Text set to public 0.3%
• CVE-2025-11283 Low 2.4 Frappe LMS Course cross site scripting 0.4%
• CVE-2025-11282 Low 2.4 Frappe LMS Incomplete Fix CVE-2025-55006 cross site scripting 0.4%
• CVE-2025-11281 Medium 5.0 Frappe LMS Unpublished Course courses access control 0.4%
• CVE-2025-11280 Low 3.7 Frappe LMS Assignment Picture files direct request 0.5%
• CVE-2025-59415 Medium 4.6 Frappe Learning vulnerable to Malicious Content upload via Profile bio field 0.2%
• CVE-2025-55006 Medium 4.3 Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature 0.3%
• CVE-2023-42807 Medium 6.3 Frappe LMS SQL Injection Issue on People Page 0.4%