# Frappe Learning vulnerabilities

Source: https://junglewise.ai/threats/technologies/learning  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/learning.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 10 vulnerabilities in Frappe Learning: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-39415, was published on 8 April 2026.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 10 (0 critical, 0 exploited in the wild)

## About Frappe Learning

An open-source learning management system built on the Frappe framework.

## Latest Frappe Learning vulnerabilities

- [CVE-2026-39415: Frappe LMS client-side quiz score manipulation](https://junglewise.ai/threats/cve-2026-39415-frappe-lms-client-side-quiz-score-manipulation) (medium, CVSS 4.3, published 8 Apr 2026)
- [CVE-2026-34606: Frappe LMS stored XSS in lesson content](https://junglewise.ai/threats/cve-2026-34606-frappe-lms-stored-xss-in-lesson-content) (medium, CVSS 6.1, published 2 Apr 2026)
- [CVE-2025-67734: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior…](https://junglewise.ai/threats/cve-2025-67734-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 5.4, published 12 Dec 2025)
- [CVE-2025-67730: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior…](https://junglewise.ai/threats/cve-2025-67730-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 5.4, published 12 Dec 2025)
- [CVE-2025-66581: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to…](https://junglewise.ai/threats/cve-2025-66581-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 6.5, published 5 Dec 2025)
- [CVE-2025-64707: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to…](https://junglewise.ai/threats/cve-2025-64707-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.4, published 12 Nov 2025)
- [CVE-2025-64705: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to…](https://junglewise.ai/threats/cve-2025-64705-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 4.3, published 12 Nov 2025)
- [CVE-2025-62779: Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier…](https://junglewise.ai/threats/cve-2025-62779-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.4, published 27 Oct 2025)
- [CVE-2025-62778: Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and…](https://junglewise.ai/threats/cve-2025-62778-frappe-learning-is-a-learning-management-system-a-security-issue) (medium, CVSS 5.3, published 27 Oct 2025)
- [CVE-2025-62158: Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system…](https://junglewise.ai/threats/cve-2025-62158-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.3, published 10 Oct 2025)

## Most severe Frappe Learning vulnerabilities

- [CVE-2025-66581: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to…](https://junglewise.ai/threats/cve-2025-66581-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 6.5, published 5 Dec 2025)
- [CVE-2026-34606: Frappe LMS stored XSS in lesson content](https://junglewise.ai/threats/cve-2026-34606-frappe-lms-stored-xss-in-lesson-content) (medium, CVSS 6.1, published 2 Apr 2026)
- [CVE-2025-64707: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to…](https://junglewise.ai/threats/cve-2025-64707-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.4, published 12 Nov 2025)
- [CVE-2025-62779: Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier…](https://junglewise.ai/threats/cve-2025-62779-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.4, published 27 Oct 2025)
- [CVE-2025-67734: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior…](https://junglewise.ai/threats/cve-2025-67734-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 5.4, published 12 Dec 2025)
- [CVE-2025-67730: Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior…](https://junglewise.ai/threats/cve-2025-67730-frappe-learning-management-system-lms-is-a-learning-system-that) (medium, CVSS 5.4, published 12 Dec 2025)
- [CVE-2025-62158: Frappe Learning is a learning system that helps users structure their content. In versions prior to 2.38.0, the system…](https://junglewise.ai/threats/cve-2025-62158-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 5.3, published 10 Oct 2025)
- [CVE-2025-62778: Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and…](https://junglewise.ai/threats/cve-2025-62778-frappe-learning-is-a-learning-management-system-a-security-issue) (medium, CVSS 5.3, published 27 Oct 2025)
- [CVE-2026-39415: Frappe LMS client-side quiz score manipulation](https://junglewise.ai/threats/cve-2026-39415-frappe-lms-client-side-quiz-score-manipulation) (medium, CVSS 4.3, published 8 Apr 2026)
- [CVE-2025-64705: Frappe Learning is a learning system that helps users structure their content. Starting in version 2.0.0 and prior to…](https://junglewise.ai/threats/cve-2025-64705-frappe-learning-is-a-learning-system-that-helps-users-structure) (medium, CVSS 4.3, published 12 Nov 2025)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other Frappe technologies

- [Frappe ERPNext](https://junglewise.ai/threats/technologies/erpnext): 100 vulnerabilities
- [Frappe Framework](https://junglewise.ai/threats/technologies/frappe): 49 vulnerabilities
- [Frappe HR](https://junglewise.ai/threats/technologies/hr): 9 vulnerabilities
- [Frappe Crm](https://junglewise.ai/threats/technologies/frappe-crm): 6 vulnerabilities
- [Frappe Learning Management System](https://junglewise.ai/threats/technologies/learning-management-system): 5 vulnerabilities
- [Frappe Builder](https://junglewise.ai/threats/technologies/frappe-builder): 3 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Frappe Learning vulnerabilities", https://junglewise.ai/threats/technologies/learning, 13 November 2026.