Skip to content
OpenAdvisories

Vendor

Frappe Technologies

268 known vulnerabilities.

Products

erpnext 99 frappe 95 lms 28 Frappe Framework 12 hrms 11 crm 6 press 6 builder 3 Frappe HelpDesk 1 frappe/lms 1 Frappe Framework (ERPNext) 1 Frappe CRM 1 Frappe Technologies 1 suite 1 helpdesk 1 HR 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-111389 Public exploit

    Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing Validation

    Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authenticated attacker, including a low-privilege account, can send specially crafte…

    Frappe Technologies hrms
  • Medium 5.1
    CVE-2025-67730 Public exploit

    Frappe authenticated users can execute XSS through form description fields

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to add malicious HTML and JavaScript through description fields in the Job, Course and Batch forms. This …

    Frappe Technologies lms