frappe lms vulnerabilities
28 published CVEs name frappe lms among the affected products.
- 28Published CVEs28 of them scored
- 16Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61806
Frappe LMS allows unpublished certificate access
frappe · lms
Medium5.3 - CVE-2026-61805
Frappe LMS: Quiz result manipulation and cross-user submission forgery
frappe · lms
Medium5.3 - CVE-2026-61803
Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amount
frappe · lms
Medium5.3 - CVE-2026-39375
Frappe LMS has Stored XSS in Course Meta
frappe · lms
Medium5.1 - CVE-2026-54343
Frappe LMS: Path Traversal in SCORM File Serving
frappe · lms
High8.7 - CVE-2026-39385
Frappe LMS enrollment bypass in paid courses via unrelated batch
frappe · lms
High7.1 - CVE-2026-46546
Frappe LMS: HTML injection in user-controlled metadata
frappe · lms
Low2.1 - CVE-2026-39405
Frappe has Path Transversal via SCORM
frappe · lms
Critical9.4 - CVE-2026-39415
Frappe Learning Management System has Client-Side Manipulation of Quiz Scores
frappe · lms
Medium5.3 - CVE-2026-34606
Stored XSS in Frappe LMS
frappe · lms
Medium6.9