CVE-2023-46127

creationtimestamp| type| source ---|---|--- 2023-10-23 18:37:48+00:00| seen| https://t.me/cibsecurity/72775...

CVE-2023-46127

CVE-2023-46127 affects the Frappe framework. A malicious user with desk access could create documents containing HTML payloads, enabling HTML Injection via a vulnerable HTML rendering/handling path in Frappe prior to patch. The issue is fixed in version 14.49.0. Affected product: Frappe (Python/M...