CVE-2025-62779: Frappe Learning users were able to add HTML through input fields in the Job Form
Published Oct 27, 2025
·Updated
Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.
Affected Software
1 affected component
Frappe Frappe Learning<2.39.1
Remediation
Event History
Oct 27, 2025
CVE Published
via MITRE·09:19 PM
Data Sourced
via MITRE·09:19 PM
DescriptionWeakness
Data Sourced
via NVD·10:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 8, 2026
Event
via NVD·12:44 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-62779?
CVE-2025-62779 is considered a high severity vulnerability due to the potential for cross-site scripting attacks.
2
How do I fix CVE-2025-62779?
To fix CVE-2025-62779, upgrade Frappe Learning to version 2.39.2 or later where the vulnerability is patched.
3
What impacts does CVE-2025-62779 have on affected systems?
CVE-2025-62779 allows users to inject HTML into input fields, which can lead to unauthorized script execution.
4
Which versions of Frappe Learning are affected by CVE-2025-62779?
CVE-2025-62779 affects Frappe Learning versions 2.39.1 and earlier.
5
Is CVE-2025-62779 exploitable remotely?
Yes, CVE-2025-62779 can be exploited remotely by crafting malicious input to be processed by the affected system.