CVE-2019-14966

An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. There exists an authenticated SQL injection...

CVE-2019-14967

An issue was discovered in Frappe Framework 10, 11 before 11.1.46, and 12. There exists an XSS vulnerability...

CVE-2019-14967

Frappe Framework versions 10 and 11 before 11.1.46, and 12 contain an XSS vulnerability that can be exploited to execute client-side code. Remediation: upgrade to 11.1.46 or later (the fixed version referenced in linked advisories). If upgrading, verify that affected components are updated to a v...