CVE-2026-50711 – Frappe Framework 17.0.0-dev – Stored XSS in Number Card filter fields rendering

CVE ID :CVE-2026-50711

Published : June 24, 2026, 3:18 p.m. | 25 minutes ago

Description :A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the Number Card component.

Severity: 4.6 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…