📦

learning

Vendor: frappe

Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 43 Total Indexed
Avg. EPSS 0.25% Exploit Prob.
Latest CVE CVE-2026-46546 Jun 10

Security Vulnerability Index

Page 3 / 5
6.1 CVSS

Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.

EPSS: 0.44%
6.3 CVSS

Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app.

EPSS: 0.35%