All vulnerabilities

Servers and applications

CVE-2019-14967

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.

Severity
Medium 6.1
Published
12 Aug 2019
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
11.1.46
Exploit chance
1.2% in the next 30 daysHigher than 69% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Frappe FrameworkServers and applications · cpe:a:frappe:frappe
  • Version 10.0.0
  • From 11.0.0 before 11.1.46
  • Version 12.0.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-14967
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-14967