PT-2026-29861 · Frappe · Frappe Lms
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Frappe Learning Management System (LMS) versions 2.27.0 through 2.47.9
Description
Frappe Learning Management System (LMS) is a system designed to help users structure content. The software contains a stored Cross-Site Scripting (XSS) flaw, which occurs when an application includes untrusted data in a web page without proper validation or encoding, allowing a malicious script to be permanently stored on the server and executed in the browser of other users.
Recommendations
Update to version 2.48.0.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Frappe Lms