Filter
-Infinity
0
Trending
Software
Frappe PressFrappe Press possible HTML injection through SaaS Signup inputs
1.2
EPSS
0.14%
First published (updated )
Frappe LMSFrappe vuilnerable to an open redirect on login page
6.1
EPSS
0.04%
First published (updated )
Frappe LMSFrappe File Permissions can by bypassed using certain endpoints
8.1
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frappe LMSFrappe Authenticated Reflected Cross site scripting (XSS) in portal pages
5.4
EPSS
0.05%
First published (updated )
Frappe LMSFrappe vulnerable to HTML injection by any Desk user
5.4
First published (updated )
Frappe LMSCross-site Scripting (XSS) - Generic in frappe/lms
7.1
EPSS
0.08%
First published (updated )
Frappe LMSFrappe LMS SQL Injection Issue on People Page
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frappe LMSPossibility limited SQL injection due to insufficient validation in Frappe
7.5
First published (updated )
Frappe LMSFrappe Search navbar_search.html cross site scripting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
ERPNextERPNext - Stored XSS leads to account takover
5.4
First published (updated )
Frappe LMSFrappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
5.3
First published (updated )
Frappe LMSIn two-factor authentication, the system also sending 2fa secret key in response, which enables an i…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.