CVE-2019-15700
27.08.2019, 18:15
public/js/frappe/form/footer/timeline.js in Frappe Framework 12 through 12.0.8 does not escape HTML in the timeline and thus is affected by crafted "changed value of" text.
| Vendor | Product | Version |
|---|---|---|
| frappe | frappe | 12.0.0 ≤ 𝑥 ≤ 12.0.8 |
𝑥
= Vulnerable software versions