CVE-2025-62778Medium· 5.3▾ SunlitFrappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.
learning >= 2.0.0, < 2.39.2Upgrade past the affected range:
learning 2.39.2Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11280Low· 3.7A flaw has been found in Frappe LMS 2.35.0
CVE-2025-11283Low· 2.4A vulnerability was determined in Frappe LMS 2.35.0
CVE-2025-11282Low· 2.4A vulnerability was found in Frappe LMS 2.34.x/2.35.0
CVE-2025-62158Medium· 5.3Frappe Learning is a learning system that helps users structure their content
CVE-2025-62779Medium· 5.4Frappe Learning is a learning system that helps users structure their content
CVE-2025-67734Medium· 5.4Frappe Learning Management System (LMS) is a learning system that helps users structure their content