Skip to content
OpenAdvisories

Product · Frappe Technologies

press

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 1.3
    CVE-2026-41430

    Press vulnerable to reflected XSS on login redirection

    Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Redirect parameter on login page is vulnerable to reflected XSS. The patch in commit 16d1b6ca2559f858a1de77bcb03fd7f1b81671…

    Frappe Technologies press
  • Low 2.7
    CVE-2025-59421

    Press vulnerable to email flooding to users due to lack of validation and rate limits

    Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). A bad actor can flood the inbox of a user by repeatedly sending invites (duplicate). The issue is fixed in commit 83c3fc767…

    Frappe Technologies press
  • Low 1.2
    CVE-2024-49751

    Frappe Press possible HTML injection through SaaS Signup inputs

    Press, a Frappe custom app that runs Frappe Cloud, manages infrastructure, subscription, marketplace, and software-as-a-service (SaaS). Prior to commit 5d118a902872d7941f099ad1fb918e2421e79ccd, a user could inject HTML through SaaS signup inputs. The user who…

    Frappe Technologies press