VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Sep 17, 2025· Updated Jun 17, 2026

CVE-2025-59415

CVE-2025-59415

Description

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute arbitrary scripts in the context of other users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Frappe/Learning2 versions
    cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:frappe:learning:*:*:*:*:*:*:*:*range: >=2.0.0,<2.35.0
    • (no CPE)range: <=2.34.1
  • Frappe/Lmsllm-fuzzy2 versions
    <=2.34.1+ 1 more
    • (no CPE)range: <=2.34.1
    • (no CPE)range: <= 2.34.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.