CVE-2026-25956 - Frappe Affected by XSS and Open Redirect in Sign Up

CVE ID : CVE-2026-25956 Published : Feb. 10, 2026, 6:16 p.m. | 39 minutes ago Description : Frappe is a full-stack web application framework. Prior to 14.99.14 and 15.94.0, an attacker could craft a malicious signup URL for a frappe site which could lead to an open redirect (or reflected XSS, depending on the crafted payload) when a user signs up. This vulnerability is fixed in 14.99.14 and 15.94.0. Severity: 6.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...