Vulnerabilities (CVE)

Filtered by vendor Frappe Subscribe
Filtered by product Frappe Lms
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5555 1 Frappe 1 Frappe Lms 2024-11-21 N/A 6.1 MEDIUM
Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.
CVE-2023-42807 1 Frappe 1 Frappe Lms 2024-11-21 N/A 6.3 MEDIUM
Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app.