Frappe vulnerabilities
266 CVEs and advisories name Frappe as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-59415Frappe Learning vulnerable to Malicious Content upload via Profile bio field
- CVE-2025-58439ERP: Possibility of SQL injection due to missing validation
- CVE-2025-55732Frappe has the possibility of SQL Injection due to improper validations
- CVE-2025-55731Frappe has the possibility of Authenticated SQL Injection due to improper validations
- CVE-2025-55006Frappe Learning Holds Potential for Malicious SVG Upload in Image Upload Feature
- CVE-2025-53545Press has a potential 2FA bypass
- CVE-2025-52898Frappe account takeover via password reset token leakage
- CVE-2025-52896Frappe authenticated XSS via data import
- CVE-2025-52895Frappe possibility of SQL injection due to improper validations
- CVE-2025-30217Frappe has possibility of SQL injection due to improper validations
- CVE-2025-30214Frappe vulnerable to information disclosure leading to account takeover
- CVE-2025-30213Frappe has Possibility of Remote Code Execution due to improper validation
- CVE-2025-30212Frappe has possibility of SQL injection due to improper validations
- CVE-2024-50356Press has a potential 2FA bypass
- CVE-2024-49751Frappe Press possible HTML injection through SaaS Signup inputs
- CVE-2024-34074Frappe vuilnerable to an open redirect on login page
- CVE-2024-27105Frappe File Permissions can by bypassed using certain endpoints
- CVE-2024-24813Frappe SQL Injection from reporting logic
- CVE-2024-24812Frappe Authenticated Reflected Cross site scripting (XSS) in portal pages
- CVE-2023-46127Frappe vulnerable to HTML injection by any Desk user
- CVE-2023-5555Cross-site Scripting (XSS) - Generic in frappe/lms
- CVE-2023-42807Frappe LMS SQL Injection Issue on People Page
- CVE-2023-41328Possibility limited SQL injection due to insufficient validation in Frappe
- CVE-2022-23055ERPNext - Improper user access conrol
- CVE-2022-23058ERPNext - Stored XSS in My Settings
- CVE-2022-23057ERPNext - Stored XSS in My Profile