CVE-2026-25956
Frappe Affected by XSS and Open Redirect in Sign Up
Résumé
Frappe Affected by XSS and Open Redirect in Sign Up
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com