CVE-2026-50712 – Frappe Framework 17.0.0-dev – Stored XSS in Tree View node label rendering

CVE ID :CVE-2026-50712

Published : June 24, 2026, 3:26 p.m. | 17 minutes ago

Description :A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the frappe.ui.Tree component

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…