CVE-2026-109602 in Frappe情報

要約

〜によって MITRE • 2026年10月13日

Frappe before 15.118.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability in dashboard chart filters because jQuery renders entered filter values as rich text. Authenticated attackers can store malicious filter values that execute scripts in the browsers of users who view the dashboard chart.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

VulnCheck

予約する

2026年10月12日

モデレーション

承諾済み

エントリ

VDB-417349

EPSS

0.00000

KEV

いいえ

アクティビティ

非常低い

ソース

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-109602
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-109602
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-109602/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!