CVE-2026-109673 - Frappe ERPNext before 16.12.0 Stored XSS via Crafted Record Names
CVE ID :CVE-2026-109673 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulnerability because the names of certain records are not properly neutralized when rendered on some...