Product

ERPNext (< 15.121.0, 16.x < 16.34.0)

1 brief RSS

Reflected Cross-Site Scripting Vulnerability in Frappe ERPNext

Frappe ERPNext versions before 14.92.1 and 15.x before 15.83.0 are susceptible to reflected XSS, allowing unauthenticated attackers to execute arbitrary JavaScript in authenticated sessions.

ERPNext +3 vulnerability authorization-bypass server-side-template-injection web-application-vulnerability

4t 1c 6m ago