Skip to content
OpenAdvisories

Product · Frappe Technologies

lms

28 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-67730 Public exploit

    Frappe authenticated users can execute XSS through form description fields

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to add malicious HTML and JavaScript through description fields in the Job, Course and Batch forms. This …

    Frappe Technologies lms