frappe_crm vulnerabilities

CVEs whose affected-version data names the frappe_crm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-68928Medium· 5.4

9mo ago

Frappe CRM is an open-source customer relationship management tool

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the …

▾ Sunlitfrappe · frappe_crmEPSS 0.21%via NVD