Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/frappe/lms/commit/8749e21744547ae32f729bde05c854113e126750 Patch
- https://github.com/frappe/lms/security/advisories/GHSA-8xvv-6v89-xxgx Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.3 · frappeNVD modified 2026-10-08 11:10
Affected (CPE criteria) 1
cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*