agentprime: frappe-lmsEvery new CVE for frappe-lms.https://agentprime.io/CVE-2026-61806: Frappe LMS allows unpublished certificate accesshttps://agentprime.io/advisories/CVE-2026-61806/https://agentprime.io/advisories/CVE-2026-61806/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:02:55 GMTCVECVE-2026-61805: Frappe LMS: Quiz result manipulation and cross-user submission forgeryhttps://agentprime.io/advisories/CVE-2026-61805/https://agentprime.io/advisories/CVE-2026-61805/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 17:01:42 GMTCVECVE-2026-61803: Frappe LMS: Client-controlled price allows paid-course / certificate purchase for an arbitrary amounthttps://agentprime.io/advisories/CVE-2026-61803/https://agentprime.io/advisories/CVE-2026-61803/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 16:50:08 GMTCVECVE-2026-39375: Frappe LMS has Stored XSS in Course Metahttps://agentprime.io/advisories/CVE-2026-39375/https://agentprime.io/advisories/CVE-2026-39375/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 16:46:58 GMTCVECVE-2026-54343: Frappe LMS: Path Traversal in SCORM File Servinghttps://agentprime.io/advisories/CVE-2026-54343/https://agentprime.io/advisories/CVE-2026-54343/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 21:35:53 GMTCVECVE-2026-39385: Frappe LMS enrollment bypass in paid courses via unrelated batchhttps://agentprime.io/advisories/CVE-2026-39385/https://agentprime.io/advisories/CVE-2026-39385/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 16:55:08 GMTCVECVE-2026-46546: Frappe LMS: HTML injection in user-controlled metadatahttps://agentprime.io/advisories/CVE-2026-46546/https://agentprime.io/advisories/CVE-2026-46546/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Jun 2026 23:54:06 GMTCVECVE-2026-39405: Frappe has Path Transversal via SCORMhttps://agentprime.io/advisories/CVE-2026-39405/https://agentprime.io/advisories/CVE-2026-39405/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 20 May 2026 19:34:17 GMTCVEcriticalCVE-2026-39415: Frappe Learning Management System has Client-Side Manipulation of Quiz Scoreshttps://agentprime.io/advisories/CVE-2026-39415/https://agentprime.io/advisories/CVE-2026-39415/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 20:07:45 GMTCVECVE-2026-34606: Stored XSS in Frappe LMShttps://agentprime.io/advisories/CVE-2026-34606/https://agentprime.io/advisories/CVE-2026-34606/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 17:50:01 GMTCVECVE-2026-26977: Frappe Learning Management System exposes details of unpublished courses to unauthorized usershttps://agentprime.io/advisories/CVE-2026-26977/https://agentprime.io/advisories/CVE-2026-26977/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Feb 2026 00:56:42 GMTCVECVE-2026-26031: Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled studentshttps://agentprime.io/advisories/CVE-2026-26031/https://agentprime.io/advisories/CVE-2026-26031/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 21:32:15 GMTCVECVE-2026-23497: Frappe LMS has a Stored XSS via Unsanitized Image Filename in Course and Jobs Pageshttps://agentprime.io/advisories/CVE-2026-23497/https://agentprime.io/advisories/CVE-2026-23497/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Jan 2026 18:25:52 GMTCVECVE-2025-67734: Frappe Authenticated Users can Execute JavaScript through its Job Formhttps://agentprime.io/advisories/CVE-2025-67734/https://agentprime.io/advisories/CVE-2025-67734/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 19:48:58 GMTCVECVE-2025-67730: Frappe authenticated users can execute XSS through form description fieldshttps://agentprime.io/advisories/CVE-2025-67730/https://agentprime.io/advisories/CVE-2025-67730/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 07:23:54 GMTCVECVE-2025-66581: Frappe LMS is Missing Server-Side Authorization in Business Logichttps://agentprime.io/advisories/CVE-2025-66581/https://agentprime.io/advisories/CVE-2025-66581/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 18:26:20 GMTCVECVE-2025-64707: Frappe LMS revoking access did not show immediate effect as roles were cachedhttps://agentprime.io/advisories/CVE-2025-64707/https://agentprime.io/advisories/CVE-2025-64707/CVSS 1.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 22:27:54 GMTCVECVE-2025-64705: Frappe user was able to access the submission of other studentshttps://agentprime.io/advisories/CVE-2025-64705/https://agentprime.io/advisories/CVE-2025-64705/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 22:25:49 GMTCVECVE-2025-62779: Frappe Learning users were able to add HTML through input fields in the Job Formhttps://agentprime.io/advisories/CVE-2025-62779/https://agentprime.io/advisories/CVE-2025-62779/CVSS 1.2 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 21:19:03 GMTCVECVE-2025-62778: Frappe Learning allowed students to access the Quiz Form via direct URLhttps://agentprime.io/advisories/CVE-2025-62778/https://agentprime.io/advisories/CVE-2025-62778/CVSS 1.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Oct 2025 21:16:06 GMTCVECVE-2025-62158: Frappe had attachments made by students to their assignments of type Text set to publichttps://agentprime.io/advisories/CVE-2025-62158/https://agentprime.io/advisories/CVE-2025-62158/CVSS 2.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Oct 2025 20:05:38 GMTCVECVE-2025-11283: Frappe LMS Course cross site scriptinghttps://agentprime.io/advisories/CVE-2025-11283/https://agentprime.io/advisories/CVE-2025-11283/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Oct 2025 05:02:06 GMTCVECVE-2025-11282: Frappe LMS Incomplete Fix CVE-2025-55006 cross site scriptinghttps://agentprime.io/advisories/CVE-2025-11282/https://agentprime.io/advisories/CVE-2025-11282/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Oct 2025 04:32:06 GMTCVECVE-2025-11281: Frappe LMS Unpublished Course courses access controlhttps://agentprime.io/advisories/CVE-2025-11281/https://agentprime.io/advisories/CVE-2025-11281/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Oct 2025 04:02:05 GMTCVECVE-2025-11280: Frappe LMS Assignment Picture files direct requesthttps://agentprime.io/advisories/CVE-2025-11280/https://agentprime.io/advisories/CVE-2025-11280/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 05 Oct 2025 03:32:06 GMTCVECVE-2025-59415: Frappe Learning vulnerable to Malicious Content upload via Profile bio fieldhttps://agentprime.io/advisories/CVE-2025-59415/https://agentprime.io/advisories/CVE-2025-59415/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Sep 2025 21:07:58 GMTCVECVE-2025-55006: Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Featurehttps://agentprime.io/advisories/CVE-2025-55006/https://agentprime.io/advisories/CVE-2025-55006/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 09 Aug 2025 02:01:57 GMTCVECVE-2023-5555: Cross-site Scripting (XSS) - Generic in frappe/lmshttps://agentprime.io/advisories/CVE-2023-5555/https://agentprime.io/advisories/CVE-2023-5555/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Oct 2023 10:32:05 GMTCVECVE-2023-42807: Frappe LMS SQL Injection Issue on People Pagehttps://agentprime.io/advisories/CVE-2023-42807/https://agentprime.io/advisories/CVE-2023-42807/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 21 Sep 2023 16:37:49 GMTCVE