CVE-2025-66205 | Frappe up to 14.99.1/15.85.x sql injection (GHSA-mp93-8vxr-hqq9)

December 1, 2025 Yanac

A vulnerability was found in Frappe up to 14.99.1/15.85.x. It has been classified as critical. This vulnerability affects unknown code. This manipulation causes sql injection.

The identification of this vulnerability is CVE-2025-66205. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More