CVE-2018-11339: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment...