Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/12 7:48 p.m.8 views

CVE-2025-67734 Frappe Authenticated Users can Execute JavaScript through its Job Form

Frappe Learning Management System LMS is a learning system that helps users structure their content. Versions prior to 2.42.0 allowed authenticated attackers to enter JavaScript through the Company Website field of the Job Form, exposing users to an XSS attack. The script could then be executed i...

5.1CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder