UpHeron
All vulnerabilities

Servers and applications

CVE-2022-3988

A vulnerability was found in Frappe. It has been rated as problematic. Affected by this issue is some unknown functionality of the file frappe/templates/includes/navbar/navbar_search.html of the component Search. The manipulation of the argument q leads to cross site scripting. The attack may be launched remotely. The name of the patch is bfab7191543961c6cb77fe267063877c31b616ce. It is…

Severity
Medium 6.1
Published
14 Nov 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Frappe FrameworkServers and applications · cpe:a:frappe:frappe
  • Every version up to 14.14.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-3988
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-3988