EUVD-2026-125907

Frappe india-payroll before 16.0.4 contains a missing authorization vulnerability in the getemployeedetails, computetaxcomparison and settaxregime methods of taxregimeselector.py that allows authenticated low-privileged users to access other employees' payroll data. Attackers can supply another...