CVE-2026-50711

Name of the Vulnerable Software and Affected Versions Frappe Framework version 17.0.0-dev

Description A Stored Cross-Site Scripting (XSS) issue exists due to improper neutralization of user-controlled input within the Number Card component, specifically affecting the rendering of filter fields. Stored XSS occurs when an application receives data from a user and includes that data within its later HTTP responses in an unsafe way, allowing a malicious script to be permanently stored on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.