← CVE Intelligence

CVE-2026-3673

Frappe Framework 16.10.0 - Stored DOM XSS in Tag Pill Renderer PUBLISHED

Description (CNA)

An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered. The vulnerable renderer interpolates tag content into HTML attributes and element content without escaping. This issue affects Frappe: 16.10.10.

Affected (CNA)

Vendor / productVersions
Frappe / Frappeaffected 16.10.10

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.