Beveiligingsadvies

CVE-2026-3673

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-22 19:32:36

Laatst bijgewerkt 2026-04-22 19:58:00

Toegewezen door Fluid Attacks

CVSS-score 4.6

Status PUBLISHED

Beschrijving

An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered. The vulnerable renderer interpolates tag content into HTML attributes and element content without escaping. This issue affects Frappe: 16.10.10.

← Alle CVE's bekijken Bekijk op cve.org ↗