frappe Erpnext Vulnerabilities

Frappe Erpnext vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

6 September 2025

Error-Based SQL Injection Vulnerability in Frappe ERP Tool
CVE-2025-58439
FrappeErpnext8.1HIGH

22 August 2022

Cross-Site Scripting Vulnerability in Frappe ERPNext by Frappe Technologies
CVE-2022-28598
FrappeErpnext👾🟡EPSS 13%6.1MEDIUM

10 August 2020

SQL Injection Vulnerability in ERPNext by Frappe Technologies
CVE-2020-6145
FrappeErpnext6.4MEDIUM

19 March 2020

Reflected XSS in ERPNext API by ERPNext Vendor
CVE-2019-20521
FrappeErpnext7.4HIGH
Reflected XSS Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20520
FrappeErpnext7.4HIGH
Reflected Cross-Site Scripting Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20519
FrappeErpnext7.4HIGH
Reflected XSS Vulnerability in ERPNext by frappe Technologies
CVE-2019-20518
FrappeErpnext7.4HIGH
Reflected XSS in ERPNext by Frappe Technologies
CVE-2019-20517
FrappeErpnext7.4HIGH
Reflected XSS Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20516
FrappeErpnext7.4HIGH
Reflected XSS Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20515
FrappeErpnext7.4HIGH
Reflected XSS Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20514
FrappeErpnext7.4HIGH

18 March 2020

Frame Injection Vulnerability in ERPNext by Frappe Technologies
CVE-2019-20511
FrappeErpnext4.7MEDIUM

11 December 2018

SQL Injection Vulnerability in ERPNext Software by Frappe
CVE-2018-20061
FrappeErpnext7.5HIGH

22 May 2018

Stored XSS Vulnerability in Frappe ERPNext by Frappe Technologies
CVE-2018-11339
FrappeErpnext6.1MEDIUM