MEDIUM 5.1 NVD
CVE-2023-54408
Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-supplied content rendered in pages. Attac
Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-supplied content rendered in pages. Attackers can submit crafted HTML that bypasses the insufficient escaping and is rendered in the browsers of users who view it, enabling cross-site scripting.
References
- https://github.com/frappe/frappe/security/advisories/GHSA-4jj9-5vgc-gc4j
- https://www.vulncheck.com/advisories/frappe-before-14.31.0-html-injection-via-weak-escapin
This medium severity vulnerability with a CVSS score of 5.1 was published on 2026-10-12 via NVD.
vulnfeed aggregates 11052 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.