Search vulnerabilities

Results 22

Export CSV
CVE-2023-5555

Cross-site Scripting (XSS) - Generic in frappe/lms

Cross-site Scripting (XSS) - Generic in GitHub repository frappe/lms prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-42807

Frappe LMS SQL Injection Issue on People Page

Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products