A vulnerability classified as problematic has been found in Frappe LMS up to 2.41.x. Affected is an unknown function. This manipulation of the argument Description causes cross site scripting.

This vulnerability is handled as CVE-2025-67730. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.