Login Request a demo
LM
Product
lms
by frappe · last CVE Sep 17, 2026
6
CVEs
0
On KEV
9.4
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 1High 2Medium 3Low 0
Severity
All severities6Critical1High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39405
9.4
0%
May 20
Frappe has Path Transversal via SCORM
Affected: < 2.50.1
CVE-2026-54343
8.7
1%
Sep 17
Frappe LMS: Path Traversal in SCORM File Serving
Affected: < 2.52.1
CVE-2026-39385
7.1
0%
Jul 20
Frappe LMS enrollment bypass in paid courses via unrelated batch
Affected: <= 2.51.0
CVE-2026-34606
6.1
0%
Apr 2
Stored XSS in Frappe LMS
Affected: >= 2.27.0, < 2.48.0
CVE-2026-46546
5.4
0%
Jun 9
Frappe LMS: HTML injection in user-controlled metadata
Affected: < 2.53.0
CVE-2026-39415
4.3
0%
Apr 8
Frappe Learning Management System has Client-Side Manipulation of Quiz Scores
Affected: < 2.46.0
Showing 6