← Back

Frappe Crm

frappe_crm

Vendor: Frappe • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-68928
1Frappe
1Frappe Crm
Jun 17, 2026
Dec 29, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version...Show more
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available.Show less
CVE-2025-11461
1Frappe
1Frappe Crm
Jun 17, 2026
Nov 26, 2025
7.1 HIGH· v4
8.8 HIGH· v3
N/A· v2
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1.