CVE-2025-11461
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Summary
Frappe CRM 1.53.1 — Multiple SQL Injections in Dashboard Controller
Original description
The description as published by the source.
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
References
- advisory fluidattacks.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com