Filtered by vendor Frappe Subscriptions
Filtered by product Frappe Subscriptions
Total 44 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-15700 1 Frappe 1 Frappe 2024-11-21 N/A
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.
CVE-2019-14967 1 Frappe 1 Frappe 2024-11-21 N/A
An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability.
CVE-2019-14966 1 Frappe 1 Frappe 2024-11-21 N/A
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection.
CVE-2019-14965 1 Frappe 1 Frappe 2024-11-21 N/A
An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue exists.