Description
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Frappe | Frappe | < 14.49.0 | 14.49.0 |
Published Sep 14, 2026 · Updated Sep 16, 2026 · Assigned by mitre
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Frappe | Frappe | < 14.49.0 | 14.49.0 |