Beveiligingsadvies

CVE-2026-3837

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-22 19:52:56

Laatst bijgewerkt 2026-04-27 17:37:35

Toegewezen door Fluid Attacks

CVSS-score 4.6

Status PUBLISHED

Beschrijving

An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk. The vulnerable formatter implementations interpolate stored values into raw HTML attributes and element content without escaping This issue affects Frappe: 16.10.0.

← Alle CVE's bekijken Bekijk op cve.org ↗