https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 20:58:39 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109633 <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109633 https://db.gcve.eu/vuln/ghsa-rcfr-6r59-hm5x <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> https://db.gcve.eu/vuln/ghsa-rcfr-6r59-hm5x