CVE-2026-50701

Description

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the dashboard-view component.

References

• https://fluidattacks.com/es/advisories/nena
• https://github.com/frappe/frappe