CVE-2026-109604 - ERPNext before 15.112.0 Stored XSS via Tool View Record Names
CVE ID :CVE-2026-109604 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without escaping. An...