What’s Vulnerable › Products

frappe lms vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your frappe lms version is affected

Latest frappe lms vulnerabilities

• CVE-2026-61806 — Frappe LMS allows unpublished certificate access (CVSS 5.3)
• CVE-2026-61805 — Frappe LMS: Quiz result manipulation and cross-user submission forgery (CVSS 5.3)
• CVE-2026-61803 — Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amount (CVSS 5.3)
• CVE-2026-39375 — Frappe LMS has Stored XSS in Course Meta (CVSS 5.1)
• CVE-2026-54343 — Frappe LMS: Path Traversal in SCORM File Serving (CVSS 8.7)
• CVE-2026-39385 — Frappe LMS enrollment bypass in paid courses via unrelated batch (CVSS 7.1)
• CVE-2026-39405 — Frappe has Path Transversal via SCORM (CVSS 9.4)