Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-55006

Frappe Learning is a learning system that helps users structure their content. In versions 2.33.0 and below, the image upload functionality did not adequately sanitize uploaded SVG files. This allowed users to upload SVG files containing embedded JavaScript or other potentially malicious content. Malicious SVG files could be used to execute arbitrary scripts in the context of other users. A fix for this issue is planned for version 2.34.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.6%
CVSS Severity
CVSS v3 Score 4.3
Products affected by CVE-2025-55006
  • Frappe » Learning » Version: 2.0.0
    cpe:2.3:a:frappe:learning:2.0.0
  • Frappe » Learning » Version: 2.0.1
    cpe:2.3:a:frappe:learning:2.0.1
  • Frappe » Learning » Version: 2.0.2
    cpe:2.3:a:frappe:learning:2.0.2
  • Frappe » Learning » Version: 2.0.3
    cpe:2.3:a:frappe:learning:2.0.3
  • Frappe » Learning » Version: 2.1.0
    cpe:2.3:a:frappe:learning:2.1.0
  • Frappe » Learning » Version: 2.10.0
    cpe:2.3:a:frappe:learning:2.10.0
  • Frappe » Learning » Version: 2.11.0
    cpe:2.3:a:frappe:learning:2.11.0
  • Frappe » Learning » Version: 2.12.0
    cpe:2.3:a:frappe:learning:2.12.0
  • Frappe » Learning » Version: 2.13.0
    cpe:2.3:a:frappe:learning:2.13.0
  • Frappe » Learning » Version: 2.14.0
    cpe:2.3:a:frappe:learning:2.14.0
  • Frappe » Learning » Version: 2.15.0
    cpe:2.3:a:frappe:learning:2.15.0
  • Frappe » Learning » Version: 2.16.0
    cpe:2.3:a:frappe:learning:2.16.0
  • Frappe » Learning » Version: 2.17.0
    cpe:2.3:a:frappe:learning:2.17.0
  • Frappe » Learning » Version: 2.18.0
    cpe:2.3:a:frappe:learning:2.18.0
  • Frappe » Learning » Version: 2.19.0
    cpe:2.3:a:frappe:learning:2.19.0
  • Frappe » Learning » Version: 2.2.0
    cpe:2.3:a:frappe:learning:2.2.0
  • Frappe » Learning » Version: 2.20.0
    cpe:2.3:a:frappe:learning:2.20.0
  • Frappe » Learning » Version: 2.21.0
    cpe:2.3:a:frappe:learning:2.21.0
  • Frappe » Learning » Version: 2.22.0
    cpe:2.3:a:frappe:learning:2.22.0
  • Frappe » Learning » Version: 2.23.0
    cpe:2.3:a:frappe:learning:2.23.0
  • Frappe » Learning » Version: 2.24.0
    cpe:2.3:a:frappe:learning:2.24.0
  • Frappe » Learning » Version: 2.25.0
    cpe:2.3:a:frappe:learning:2.25.0
  • Frappe » Learning » Version: 2.26.0
    cpe:2.3:a:frappe:learning:2.26.0
  • Frappe » Learning » Version: 2.27.0
    cpe:2.3:a:frappe:learning:2.27.0
  • Frappe » Learning » Version: 2.28.0
    cpe:2.3:a:frappe:learning:2.28.0
  • Frappe » Learning » Version: 2.28.1
    cpe:2.3:a:frappe:learning:2.28.1
  • Frappe » Learning » Version: 2.29.0
    cpe:2.3:a:frappe:learning:2.29.0
  • Frappe » Learning » Version: 2.3.0
    cpe:2.3:a:frappe:learning:2.3.0
  • Frappe » Learning » Version: 2.30.0
    cpe:2.3:a:frappe:learning:2.30.0
  • Frappe » Learning » Version: 2.31.0
    cpe:2.3:a:frappe:learning:2.31.0
  • Frappe » Learning » Version: 2.32.0
    cpe:2.3:a:frappe:learning:2.32.0
  • Frappe » Learning » Version: 2.32.1
    cpe:2.3:a:frappe:learning:2.32.1
  • Frappe » Learning » Version: 2.32.2
    cpe:2.3:a:frappe:learning:2.32.2
  • Frappe » Learning » Version: 2.33.0
    cpe:2.3:a:frappe:learning:2.33.0
  • Frappe » Learning » Version: 2.4.0
    cpe:2.3:a:frappe:learning:2.4.0
  • Frappe » Learning » Version: 2.5.0
    cpe:2.3:a:frappe:learning:2.5.0
  • Frappe » Learning » Version: 2.6.0
    cpe:2.3:a:frappe:learning:2.6.0
  • Frappe » Learning » Version: 2.7.0
    cpe:2.3:a:frappe:learning:2.7.0
  • Frappe » Learning » Version: 2.8.0
    cpe:2.3:a:frappe:learning:2.8.0
  • Frappe » Learning » Version: 2.9.0
    cpe:2.3:a:frappe:learning:2.9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved