CVE-2025-65923: XSS
A Stored Cross-Site Scripting (XSS) vulnerability was discovered within the CSV import mechanism of ERPNext thru 15.88.1 when using the Update Existing Recordsoption. An attacker can embed malicious JavaScript code into a CSV field, which is then stored in the database and executed whenever the affected record is viewed by a user within the ERPNext web interface. This exposure may allow an attacker to compromise user sessions or perform unauthorized actions under the context of a victim's account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65923?
CVE-2025-65923 is classified as a high severity vulnerability due to the potential for remote code execution through stored cross-site scripting.
How do I fix CVE-2025-65923?
To fix CVE-2025-65923, you should update ERPNext to version 15.89 or later where the vulnerability is addressed.
What is the impact of CVE-2025-65923 on my ERPNext installation?
The impact of CVE-2025-65923 allows attackers to execute arbitrary JavaScript in the context of users accessing affected pages, potentially compromising user accounts.
Which versions of ERPNext are affected by CVE-2025-65923?
CVE-2025-65923 affects ERPNext versions up to and including 15.88.1.
How can I identify an attack exploiting CVE-2025-65923 in my logs?
You can identify an attack exploiting CVE-2025-65923 by looking for unusual entries in your logs that indicate JavaScript was executed in the context of user sessions after CSV imports.