CVE-2026-50708

UNKNOWN View on NVD ↗

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to improper neutralization of user-controlled input in the MultiSelectDialog component.

References

https://fluidattacks.com/es/advisories/extremoduro
https://github.com/frappe/frappe
https://fluidattacks.com/es/advisories/extremoduro

Published: Jun 24, 2026 16:16 UTC Modified: Jun 24, 2026 17:17 UTC