https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T20:30:52.656121+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25956 CVE-2026-25956 — Frappe Affected by XSS and Open Redirect in Sign Up 2026-10-09T20:30:52.672453+00:00

Affected: frappe

Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0.