VULNERABILITY INTELLIGENCE

CVE-2026-50712

CVSS score4.8 MEDIUM

EPSS probability0.30%

CISA KEVNot currently listed

Published2026-06-24

Last modified2026-10-25

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree component