Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3 Patch
- https://github.com/frappe/lms/security/advisories/GHSA-j6h8-qg65-3fpx Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 1.2 · frappeNVD modified 2026-10-08 11:10
Affected (CPE criteria) 1
cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*