1. Home
  2. CVE Database
  3. CVE-2025-59415
MEDIUM · 4.6

CVE-2025-59415

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sa...

Vulnerability Description

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute arbitrary scripts in the context of other users.

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
FrappeLearning>= 2.0.0, < 2.35.0

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2025-59415?

CVE-2025-59415 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sa...

How severe is CVE-2025-59415?

CVE-2025-59415 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-59415?

Check the references section above for vendor advisories and patch information. Affected products include: Frappe Learning.