Home > Vulnerability Database > CVE-2025-62779

Mend.io Vulnerability Database

CVE-2025-62779

Good to know:

Date: October 27, 2025

Frappe Learning is a learning system that helps users structure their content. In Frappe Learning 2.39.1 and earlier, users were able to add HTML through input fields in the Job Form.

Severity Score

0.0

Related Resources (4)

Url: https://nvd.nist.gov/vuln/detail/CVE-2025-62779

Url: https://github.com/frappe/lms/security/advisories/GHSA-j6h8-qg65-3fpx

Url: https://github.com/frappe/lms/commit/75001b494d5d8198eab20b0cd85d5bd719448ea3

Url: https://www.mend.io/vulnerability-database/CVE-2025-62779

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

CVSS v3.1

Base Score:	0.0
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	REQUIRED
Scope (S):	CHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	NONE