A vulnerability was found in Frappe ERPNext up to 15.103.1. It has been declared as problematic. Affected is an unknown function of the component Email Template Handler. The manipulation results in cross site scripting.
This vulnerability is identified as CVE-2026-38432. The attack can be executed remotely. There is not any exploit available.
