Filters
Frappe FrappeFrappe Authenticated Reflected Cross site scripting (XSS) in portal pages
5.4
EPSS
0.05%
First published (updated )
Frappe FrappeFrappe vulnerable to HTML injection by any Desk user
5.4
First published (updated )
Frappe Frappe LmsCross-site Scripting (XSS) - Generic in frappe/lms
7.1
First published (updated )
Frappe Frappe LmsFrappe LMS SQL Injection Issue on People Page
9.8
First published (updated )
Frappe FrappePossibility limited SQL injection due to insufficient validation in Frappe
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frappe FrappeFrappe Search navbar_search.html cross site scripting
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frappe ERPNextERPNext - Stored XSS leads to account takover
5.4
First published (updated )
Frappe ERPNextERPNext - Improper user access conrol
5.5
First published (updated )
Frappe FrappeFrappe Framework 12 and 13 does not properly validate the HTTP method for the frappe.client API.
5.3
First published (updated )
Frappe FrappeIn two-factor authentication, the system also sending 2fa secret key in response, which enables an i…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frappe FrappeIn core/doctype/prepared_report/prepared_report.py in Frappe 11 and 12, data files generated with Pr…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.