CVE-2026-109653 - Frappe ERPNext before 15.119.0 Stored XSS Leading to Account Takeover
CVE ID :CVE-2026-109653 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because record fields are rendered into an HTML attribute context without escaping. A...