CVE-2025-65267 | ERPNext/Frappe SVG Avatar Image cross site scripting

A vulnerability was found in ERPNext and Frappe and classified as problematic. Affected by this issue is some unknown functionality of the component SVG Avatar Image Handler. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2025-65267. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More