CVE-2025-11461 — Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: …
Published: 2025-11-26 · CVSS: 7.1 · CVSS 4.0
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements. This issue affects Frappe CRM: 1.53.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7