frappe Vulnerabilities and Affected Products
Vulnerabilities associated with crm.
Products
Clear product- frappe62 vulnerabilities
- lms23 vulnerabilities
- erpnext21 vulnerabilities
- Frappe Framework12 vulnerabilities
- press6 vulnerabilities
- hrms4 vulnerabilities
- crm1 vulnerability
- Frappe CRM1 vulnerability
- Frappe HelpDesk1 vulnerability
- frappe/lms1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-68928MEDIUM | Frappe CRM vulnerable to authenticated XSS via website fieldFrappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available. CWE-79Dec 29, 2025 | CVSS5.4v3.1 | EPSS0.176% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |