https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T20:58:36.394840+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109633 fkie_cve-2026-109633 2026-10-14T20:58:36.424685+00:00

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.

 https://db.gcve.eu/vuln/ghsa-rcfr-6r59-hm5x GHSA-rcfr-6r59-hm5x 2026-10-14T20:58:36.424867+00:00

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user's session, executing script to act as that user and take over the account.