350 matches found
CVE-2026-39375
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
EUVD-2026-114195
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
CVE-2026-39375
The Frappe Learning Management System (LMS) is vulnerable to stored cross-site scripting (XSS) in versions prior to 2.52.0 . An authenticated user with a course editing role can inject malicious JavaScript via meta tag fields within the Course Management module . The root cause is the lack of ade...
CVE-2026-39375 Frappe LMS has Stored XSS in Course Meta
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
CVE-2026-39375 Frappe LMS has Stored XSS in Course Meta
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
CVE-2026-39375 Frappe LMS has Stored XSS in Course Meta
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
PT-2026-133684
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
CVE-2026-39375: frappe lms: Frappe Learning Management System (LMS) is a learning system that helps users structure their content
Frappe Learning Management System LMS is a learning system that helps users structure their content. Prior to version 2.52.0, an authenticated user with a course editing role can inject malicious JavaScript through meta tag fields in the Course Management module. The values are stored without...
PT-2026-84817
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view function set course mode price at lms/djangoapps/instructor/views/instructor dashboard.py:430 is decorated only with @login required and performs no course-level permission chec...
CVE-2026-24670
The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated students to create new course units, an action normally restricted to higher-privileged roles. This issue has been patch...
CVE-2026-24670 Open eClass Has Broken Access Control in Course Units Module Allows Students to Create Units
The Open eClass platform formerly known as GUnet eClass is a complete course management system. Prior to version 4.2, a broken access control vulnerability allows authenticated students to create new course units, an action normally restricted to higher-privileged roles. This issue has been patch...
PT-2026-6202
Name of the Vulnerable Software and Affected Versions Open eClass versions prior to 4.2 Description The Open eClass platform, previously known as GUnet eClass, is a course management system. A broken access control issue permits authenticated students to create new course units, a function...
CVE-2025-13272
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Affected is an unknown function of the file /managecourse.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be us...
[SECURITY] Fedora 43 Update: moodle-5.0.3-1.fc43
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
[SECURITY] Fedora 41 Update: moodle-4.4.11-1.fc41
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
[SECURITY] Fedora 42 Update: moodle-4.5.7-1.fc42
Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...
CVE-2025-56747
Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...
CVE-2025-56747: Improper Privilege Management
Creativeitem Academy LMS up to and including 5.13 contains a privilege escalation vulnerability in the Apiinstructor controller where regular authenticated users can access instructor-only functions without proper role validation, allowing unauthorized course creation and management...