Frappe Crm vulnerabilities

2 vulnerabilities

Known vulnerabilities in Frappe Crm, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2025-11461frappefrappe_crm
EPSS score
0.35%
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1.5.4CVE-2025-68928frappecrm+1
EPSS score
0.21%
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available.