Frappe Framework (< 14.81.4, 15.x < 15.41.0)

Frappe versions 14.x and 15.x contain a privilege management vulnerability allowing authenticated Website Users to escalate to System Manager privileges via document action manipulation.