CVE-2023-42807 — Frappe LMS SQL Injection Issue on People Page
Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fix…
Published: 2023-09-21 · CVSS: 6.3 · CVSS 3.1
Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7