Low severity2.4NVD Advisory· Published Oct 5, 2025· Updated Apr 29, 2026
CVE-2025-11282
CVE-2025-11282
Description
A vulnerability was found in Frappe LMS 2.34.x/2.35.0. The impacted element is an unknown function of the component Incomplete Fix CVE-2025-55006. Performing a manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The affected component should be upgraded. The vendor was informed early about a total of four security issues and confirmed that those have been fixed. However, the release notes on GitHub do not mention them.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- gist.github.com/0xHamy/c2a81f2d1c779c513fa3db6f3ad24544nvdExploitThird Party Advisory
- vuldb.comnvdExploitThird Party AdvisoryVDB Entry
- github.com/frappe/lms/security/advisories/GHSA-mvxw-r9x4-3vrrnvdVendor Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.