CVE-2025-68928 | Frappe CRM up to 1.56.1 URL Website cross site scripting (GHSA-fm34-v6j7-chwc)

December 29, 2025 Yanac

A vulnerability classified as problematic has been found in Frappe CRM up to 1.56.1. This affects an unknown part of the component URL Handler. This manipulation of the argument Website causes cross site scripting.

The identification of this vulnerability is CVE-2025-68928. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More