Security Advisory

CVE-2026-39385

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-20 16:55:08

Last updated 2026-07-20 19:07:17

Assigner GitHub_M

CVSS score 7.1

State PUBLISHED

Description

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course.

← Browse all CVEs View on cve.org ↗