CVE-2025-62779: Frappe Learning

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.

Affected products

• Frappe Learning: from 2.0.0, before 2.39.2 (fixed in 2.39.2)

Published 2025-10-27. Last modified 2026-10-08.