Learning vulnerabilities

2 known vulnerabilities in Learning from Frappe. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Frappe Learning is a learning system that helps users structure their content.

  CVE-2025-55006Aug 9, 2025Frappe

  Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately sanitize uploaded SVG files. This allowed users to upload SVG files containing embedded JavaScript or

• 9.8 Critical severity

  lms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-42807Sep 21, 2023Frappe

  Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest m