CVE-2025-68928 Frappe CRM vulnerable to authenticated XSS via website field

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available...

CVE-2025-68928 Frappe CRM vulnerable to authenticated XSS via website field

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available...

CVE-2025-68928: Improper Neutralization of Input During Web Page Generation

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could set crafted URLs in a website field, which were not sanitized, causing cross-site scripting. Version 1.56.2 fixes the issue. No known workarounds are available...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator by Givan Personal Developers. A security vulnerability exists in VvvebJs version 1.7.2, which stems from a file upload vulnerability in save.php...

VvvebJs 安全漏洞

VvvebJs is a drag-and-drop website generator by Givan Personal Developers. A security vulnerability exists in VvvebJs version 1.7.2, which stems from a directory traversal vulnerability in scan.php...

PT-2025-53727

Name of the Vulnerable Software and Affected Versions Frappe CRM versions prior to 1.56.2 Description Authenticated users can set crafted URLs in a website field that are not sanitized, leading to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites...

The vulnerability of the Amiro.CMS content management system lies in the lack of measures taken to protect the website structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Amiro.CMS content management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the R7-Officer corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow attackers to carry out XSS attacks...

The vulnerability of the R7-Officer corporate server’s document editor, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the R7-Office corporate server document editor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to carry out XSS attacks...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis lies in the insufficient protection of the website structure, which allows attackers to disclose protected information.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient protection of the website structure. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, arises from the lack of protective measures for the website structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

The vulnerability of the OpManager, OpManager MSP, and OpManager Plus network monitoring software lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the OpManager, OpManager MSP, and OpManager Plus network monitoring software lies in the lack of security measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Zohocorp ManageEngine Exchange Reporter Plus software, a monitoring, analysis, and reporting tool, arises from the lack of protective measures for the website structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

The vulnerability of the RTAnalytics business analytics platform, related to the lack of measures taken to protect the website structure, allows a hacker to execute arbitrary JavaScript code.

The vulnerability of the RTAnalytics business analytics platform lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary JavaScript code...

The vulnerability of the SAP Business Warehouse data management and analytics system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the SAP Business Warehouse data management and analytics system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Splunk Enterprise operating analysis platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL during page loading, causing it to go to an unreliable website. This allows attackers to disclose sensitive information that should be protected.

The vulnerability of the SAP NetWeaver Application Server ABAP software integration platform lies in the redirection of the URL to an unreliable website when loading the login page. Exploiting this vulnerability allows a malicious actor to disclose the protected information...