Filter
AND
-Infinity
0

Frappe LMSFrappe vuilnerable to an open redirect on login page

EPSS
0.04%
First published (updated )

Frappe LMSFrappe File Permissions can by bypassed using certain endpoints

8.1
EPSS
0.04%
First published (updated )

Frappe LMSFrappe SQL Injection from reporting logic

7.5
First published (updated )

Frappe LMSFrappe Authenticated Reflected Cross site scripting (XSS) in portal pages

EPSS
0.05%
First published (updated )

Frappe LMSFrappe vulnerable to HTML injection by any Desk user

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frappe LMSCross-site Scripting (XSS) - Generic in frappe/lms

7.1
EPSS
0.08%
First published (updated )

Frappe LMSFrappe LMS SQL Injection Issue on People Page

First published (updated )

Frappe LMSPossibility limited SQL injection due to insufficient validation in Frappe

7.5
First published (updated )

Frappe LMSPath Traversal

First published (updated )

Frappe LMSFrappe Search navbar_search.html cross site scripting

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frappe LMSFrappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.

First published (updated )

Frappe LMSIn two-factor authentication, the system also sending 2fa secret key in response, which enables an i…

7.5
First published (updated )

Frappe LMSIn core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Pr…

7.5
First published (updated )

Frappe LMSXSS

First published (updated )

Frappe LMSCode Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frappe LMSSQL Injection

8.8
First published (updated )

Frappe LMSXSS

First published (updated )

Frappe LMSSQL Injection

8.8
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203