Vulnerabilities > Frappe > Erpnext > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-03-18 CVE-2019-20511 Cross-site Scripting vulnerability in Frappe Erpnext 11.1.47
ERPNext 11.1.47 allows blog?blog_category= Frame Injection.
network
low complexity
frappe CWE-79
6.1
2018-05-22 CVE-2018-11339 Cross-site Scripting vulnerability in Frappe Erpnext 11.X.Xdevelopb1036E5
An XSS issue was discovered in Frappe ERPNext v11.x.x-develop b1036e5 via a comment.
network
low complexity
frappe CWE-79
6.1