Description
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.
Unscored
CVE-2019-15700
EUVD-2019-6637GHSA-xhrj-69c3-mgj7
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by…
Published Aug 27, 2019 · Updated Aug 5, 2024 · Assigned by mitre