Skip to content
OpenAdvisories

Vendor

Frappe Technologies

268 known vulnerabilities.

Products

erpnext 99 frappe 95 lms 28 Frappe Framework 12 hrms 11 crm 6 press 6 builder 3 Frappe HelpDesk 1 frappe/lms 1 Frappe Framework (ERPNext) 1 Frappe CRM 1 Frappe Technologies 1 suite 1 helpdesk 1 HR 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-67730 Public exploit

    Frappe authenticated users can execute XSS through form description fields

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Versions prior to 2.42.0 allow authenticated users to add malicious HTML and JavaScript through description fields in the Job, Course and Batch forms. This …

    Frappe Technologies lms