PT-2026-29861 · Frappe · Learning+1

Raizasafeel · Publicado 2026-04-02 · Atualizado 2026-04-02 · CVE-2026-34606

NVD

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. From version 2.27.0 to before version 2.48.0, Frappe LMS was vulnerable to stored XSS. This issue has been patched in version 2.48.0.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-34606

Produtos afetados

Learning

Lms

Referências · 5

• https://github.com/frappe/lms/security/advisories/GHSA-qf5w-r34q-c7j2 · Aviso do Fabricante
• https://github.com/frappe/lms/pull/2185 · Correção
• https://github.com/frappe/lms/releases/tag/v2.48.0 · Nota
• https://github.com/frappe/lms/commit/b8283860a7f029ea2fa0245131c398c079088921 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-34606 · Nota de Segurança