CVE-2026-109602 in Frappeinformación

Resumen

por MITRE • 2026-10-13

Frappe before 15.118.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability in dashboard chart filters because jQuery renders entered filter values as rich text. Authenticated attackers can store malicious filter values that execute scripts in the browsers of users who view the dashboard chart.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

VulnCheck

Reservar

2026-10-12

Divulgación

2026-10-13

Moderación

aceptado

Artículo

VDB-417349

EPSS

0.00168

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-109602
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-109602
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-109602/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!