2026-04-23 · 2 min · BitNinja Team

New Cybersecurity Alert: XSS in Frappe Framework

The recently discovered CVE-2026-3673 vulnerability in Frappe Framework 16.10.0 poses a significant risk for system administrators. This stored DOM XSS (Cross-Site Scripting) flaw allows authenticated attackers to inject malicious code, which is executed when a victim views ta...