CVE-2026-109673 | Frappe ERPNext up to 15.102.x/16.11.x Dashboards cross site scripting

October 13, 2026 Yanac

A vulnerability marked as problematic has been reported in Frappe ERPNext up to 15.102.x/16.11.x. Affected by this issue is some unknown functionality of the component Dashboards. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-109673. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More