CVE-2023-51769
Received Received - Intake

Cross-Site Scripting in Frappe Framework

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: MITRE

Description
Frappe before 14.49.0 allows an XSS attack that is associated with blog pages and exception pages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2023-51769
EUVD
EUVD-2023-60689

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
frappe frappe to 14.49.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Cross-Site Scripting (XSS) flaw in Frappe versions before 14.49.0. It allows attackers to inject HTML code into blog pages and exception pages via a maliciously crafted URL. When a user clicks such a link, the injected script executes in their browser.

Detection Guidance

To detect this XSS vulnerability in Frappe versions before 14.49.0, inspect blog pages and exception pages for malformed URLs or injected HTML. Check server logs for unusual requests targeting these pages. No specific commands are provided in the resources.

Impact Analysis

The impact is limited to basic XSS attacks. An attacker could steal session cookies, deface web pages, or perform actions on behalf of the user. However, it does not enable deeper system exploitation beyond these browser-based attacks.

Mitigation Strategies

Update Frappe to version 14.49.0 or later immediately to patch the XSS vulnerability. Monitor for suspicious activity on blog and exception pages until the update is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-51769. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart