CVE-2026-109671 | Frappe ERPNext up to 15.112.x/16.23.x Profile Field cross site scripting

October 13, 2026 Yanac

A vulnerability described as problematic has been identified in Frappe ERPNext up to 15.112.x/16.23.x. This affects an unknown part of the component Profile Field. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-109671. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More