Live › vulnerability › CVE-2026-61803
Frappe Learning Management System trusts a price sent from the browser during course and certificate checkout. A logged-in user can complete a paid purchase for any amount they choose.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 17:31 UTC. All times on this page are UTC.
Sites running Frappe LMS before 2.52.1 that sell paid courses or certificates are exposed, because checkout accepts a client-supplied price. Sites with no paid items, or with only free courses, are unlikely to be affected. Exploitation requires an authenticated account, and the flaw does not expose other users' data.
No product ranges from the sources yet.
bench version or the app's pyproject.toml) and see whether it is below 2.52.1.2.52.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to version 2.52.1, the course/certificate checkout flow accepts client-controlled pricing, allowing an authenticated user to complete a paid-course or certificate purchase for an amount other than the actual price. This is a business-logic integrity issue; it does not expose other users' data or grant elevated privileges. This issue is fixed in version 2.52.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-61803")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.