https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 02:27:58 +0000 https://db.gcve.eu/vuln/cve-2026-109633 <p><strong>Affected:</strong> frappe erpnext</p> <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> <p><strong>Affected:</strong> frappe erpnext</p> <p>Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored without neutralization. Unauthenticated attackers can submit crafted content that is rendered as raw HTML in a privileged user&#39;s session, executing script to act as that user and take over the account.</p> https://db.gcve.eu/vuln/cve-2026-109633