CVE-2026-44205

Vulnerability Description

Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browsers of other users. This issue has been patched in version 15.106.0.

Related Weaknesses (CWE)

CWE-79

References

https://github.com/frappe/frappe/security/advisories/GHSA-2wx6-8gmq-x4fw

FAQ

What is CVE-2026-44205?

CVE-2026-44205 is a documented vulnerability. Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browser...

How severe is CVE-2026-44205?

CVSS scoring is not yet available for CVE-2026-44205. Check NVD for updates.

Is there a patch for CVE-2026-44205?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.