Detections
Analytics

CVE-2025-62779

medium

Description

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.

References

https://github.com/frappe/lms/security/advisories/GHSA-j6h8-qg65-3fpx

https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3

Details

Source: Mitre, NVD

Published: 2025-10-27

Updated: 2025-11-03

Risk Information

CVSS v2

Base Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 5.4

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Severity: Medium

CVSS v4

Base Score: 5.1

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Severity: Medium

EPSS

EPSS: 0.00047