CVE-2026-109653 | Frappe ERPNext up to 15.118.x/16.30.x cross site scripting

October 13, 2026 Yanac

A vulnerability was found in Frappe ERPNext up to 15.118.x/16.30.x. It has been classified as problematic. This vulnerability affects unknown code. Performing a manipulation results in cross site scripting.

This vulnerability is reported as CVE-2026-109653. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More