Frappe · Frappe Learning Management System · CVE-2026-23497
**Name of the Vulnerable Software and Affected Versions**
Frappe Learning Management System versions prior to 2.44.0
**Description**
Frappe Learning Management System (LMS) contains a stored cross-site scripting (XSS) issue. A crafted image filename can trigger malicious JavaScript execution when displayed on course or jobs pages.
**Recommendations**
Update to a version newer than 2.44.0.