← Database

CVE-2026-50709

N/A CVSS: N/A Published: 2026-06-24 Modified: 2026-06-25

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Notifications > Events panel.

Affected Platforms

Unknown

Weakness Type

CWE-79

References