frappe/crm

frappe/crm

GitHubGitHub
GitHubgithub.com
frappe.iofrappe.io
Releases253
Frequency3 days 8 hours
Last Release
Stars3.02K
Fully featured, open source CRM
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2025-68928NVD↗
< 1.56.25.4 MEDIUM—

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available.

CVE-2025-11461NVD↗
= 1.53.18.8 HIGH—

Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1.