Frappe Learning Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Frappe Learning Management System (LMS) versions prior to 2.42.0. This issue allows authenticated attackers to inject JavaScript into the Company Website field of the Job Form. The injected script could be executed in the browsers of users who viewed the malicious job posting.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where injected scripts are executed in the context of the user's browser.

Remediation

Users can upgrade to Frappe LMS version 2.42.0 or later to address this vulnerability.