Frappe has possibility of SQL injection due to improper validations
ImpactSQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information.WorkaroundsUpgrading is required, no other workaround is present.