CVE-2026-50710

Description

A Stored Cross-Site Scripting (XSS) vulnerability exists in Frappe Framework version 17.0.0-dev due to unsafe evaluation of user-controlled data in the Number Card component.

References

• https://fluidattacks.com/es/advisories/sum41
• https://github.com/frappe/frappe
• https://fluidattacks.com/es/advisories/sum41