CVE-2026-109662 | Frappe ERPNext up to 15.111.x/16.22.x Form cross site scripting

October 13, 2026 Yanac

A vulnerability labeled as problematic has been found in Frappe ERPNext up to 15.111.x/16.22.x. Affected by this vulnerability is an unknown functionality of the component Form. Executing a manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2026-109662. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More