Vulnerabilities (CVE)

Filtered by vendor Frappe Subscribe
Filtered by product Frappe
Total 22 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14967 1 Frappe 1 Frappe 2019-08-15 4.3 MEDIUM 6.1 MEDIUM
An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
CVE-2017-1000120 1 Frappe 1 Frappe 2017-10-13 6.5 MEDIUM 8.8 HIGH
[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows remote authenticated users to execute arbitrary SQL commands via the fields parameter.