Security Advisory
CVE-2025-11461
8.8
HIGH
Vulnerability Description
Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
Published Date
November 26, 2025
Official Source
NIST NVD Advisory