CVE-2026-50710 – Frappe Framework 17.0.0-dev – Stored XSS via eval in Number Card filters_config

CVE ID :CVE-2026-50710

Published : June 24, 2026, 3:08 p.m. | 35 minutes ago

Description :A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component.

Severity: 4.6 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…