https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:43:05.314510+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-23057 CVE-2022-23057 — ERPNext - Stored XSS in My Profile 2026-10-07T02:43:05.331241+00:00

Affected: frappe

In ERPNext, versions v12.0.9--v13.0.3 are vulnerable to Stored Cross-Site-Scripting (XSS), due to user input not being validated properly. A low privileged attacker could inject arbitrary code into input fields when editing his profile.