Learning
Vendor:
First CVE: Sep 21, 2023 · Active for 2 years
22
Total CVEs
More Total CVEs than 94% of tracked products
7.3
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
5.5
Avg CVSS
Higher Avg CVSS than 15% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Learning over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 21, 2023
2 years ago
Most Recent CVE
Jun 10, 2026
44 days ago
CVE Severity & Scoring
Learning22 CVEs
9%
82%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network22 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low20 (90.9%)
High2 (9.1%)
Unknown0 (0.0%)
User Interaction
None12 (54.5%)
Unknown0 (0.0%)
Required10 (45.5%)
Privileges Required
Low12 (54.5%)
High2 (9.1%)
None8 (36.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (22 CVEs).
22 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-42807CRITICAL Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed | Sep 21, 2023 | 9.8 | 30 | NO | NO |
CVE-2025-55006HIGH Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately sanitize uploaded SVG | Aug 9, 2025 | 8.8 | 29 | NO | NO |
CVE-2026-46546MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.53.0, an authenticated user could supply specially crafted | Jun 10, 2026 | 5.4 | 23 | NO | NO |
CVE-2025-66581MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.41.0, a flaw in the server-side authorization logic allowed authen | Dec 5, 2025 | 6.5 | 22 | NO | NO |
CVE-2025-11282MEDIUM A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing a manipulation results | Oct 5, 2025 | 6.1 | 22 | NO | NO |
CVE-2025-67730MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to add malicious HTML and | Dec 12, 2025 | 5.4 | 21 | NO | NO |
CVE-2026-23497MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In 2.44.0 and earlier, there is a stored XSS vulnerability where a specially | Jan 14, 2026 | 5.4 | 20 | NO | NO |
CVE-2025-67734MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allowed authenticated attackers to enter JavaScript | Dec 12, 2025 | 5.4 | 20 | NO | NO |
CVE-2025-62158MEDIUM Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system did stored the attachments uploaded by the students in their | Oct 10, 2025 | 5.3 | 20 | NO | NO |
CVE-2026-34606MEDIUM Frappe Learning Management System (LMS) is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to st | Apr 2, 2026 | 6.1 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (22 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (22 CVEs).
Media Mentions
Signals from CVEs in this product scope (22 CVEs).
Top CNAs Publishing CVEs For Learning
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.37.0 | 1 | 5.3 | 0.3% | 0 | 0 |
| 2.35.0 | 3 | 3.7 | 0.4% | 0 | 0 |
| 1.0.0 | 1 | 6.1 | 0.4% | 0 | 0 |