NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-39385
Summary

Frappe LMS is an open source learning management system. In version 2.51.0 and earlier, a user could bypass payment validation for courses by using unrelated batch. This has been patched in 2.52.0 with enrollment now validating that the batch is linked to course.

Publication Date July 21, 2026, 2:17 a.m.
Registration Date July 21, 2026, 4:30 a.m.
Last Update July 21, 2026, 2:17 a.m.
Related information, measures and tools
Common Vulnerabilities List