Vulnerabilities

CVE-2025-68928 - Frappe CRM vulnerable to authenticated XSS via website field

2025-12-29 0 views admin

CVE ID : CVE-2025-68928 Published : Dec. 29, 2025, 3:16 p.m. | 48 minutes ago Description : Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2025-68928

Severity

MEDIUM

Published

Dec. 29, 2025

Source: Telegram CVE Monitor

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2025-68928medium

CVE-2025-68928 - Frappe CRM vulnerable to authenticated XSS via website field

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2025-57460 - Machsol MachPanel Remote File Upload Web Shell Vulnerability

CVE-2025-15191 - D-Link DWR-M920 formLtefotaUpgradeFibocom sub_4155B4 command injection

CVE-2025-15193 - D-Link DWR-M920 formParentControl sub_423848 buffer overflow

CVE-2025-15192 - D-Link DWR-M920 formLtefotaUpgradeQuectel sub_415328 command injection

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting