VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Sep 21, 2023· Updated Jun 17, 2026

CVE-2023-42807

CVE-2023-42807

Description

Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the main branch. Users won't face this issue if they are using the latest main branch of the app.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Frappe/Learning
    cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*
    Range: <=1.0.0
  • Frappe/Lmsllm-fuzzy2 versions
    <=1.0.0+ 1 more
    • (no CPE)range: <=1.0.0
    • (no CPE)range: <= 1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.