CVE-2024-58391

The Frappe framework is vulnerable to a cross-site scripting (XSS) vulnerability in versions before 14.58.0 and 15.x before 15.4.0 . The root cause is that printview parameters are not properly escaped before being rendered. A remote attacker can craft a malicious URL that, when visited by a vict...