CVE-2025-62778: Frappe Learning

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL.

Affected products

• Frappe Learning: from 2.0.0, before 2.39.2 (fixed in 2.39.2)

Published 2025-10-27. Last modified 2026-10-08.