CVE-2026-47739

Vulnerability Description

Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched in versions 15.106.0 and 16.16.0.

Related Weaknesses (CWE)

CWE-79

References

https://github.com/frappe/frappe/security/advisories/GHSA-vxmp-h244-wv3r

FAQ

What is CVE-2026-47739?

CVE-2026-47739 is a documented vulnerability. Frappe is a full-stack web application framework. Prior to versions 15.106.0 and 16.16.0, stored XSS in Note was possible due to lack of sanitization. This issue has been patched in versions 15.106.0 ...

How severe is CVE-2026-47739?

CVSS scoring is not yet available for CVE-2026-47739. Check NVD for updates.

Is there a patch for CVE-2026-47739?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.