PT-2026-111003

CVE-2024-58391

Published

2026-10-12

Updated

2026-10-13

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 14.58.0 Frappe versions prior to 15.4.0

Description A cross-site scripting issue exists in the printview feature because parameters are not escaped before being rendered. This allows remote attackers to craft a malicious URL that, when visited, injects HTML and executes scripts within the victim's browser session.

Recommendations Update to version 14.58.0 or later. Update to version 15.4.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Ankush

Shariquerik

Zecopro

Vendors

Affected products

Weakness enumeration