CVE-2025-71432 - Frappe ERPNext before 15.83.0 Reflected XSS Leading to Account Takeover
CVE ID :CVE-2025-71432 Published : Oct. 12, 2026, 11:17 p.m. | 14 minutes ago Description :Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowing arbitrary JavaScript to execute...