CVE-2022-3988

A vulnerability was found in Frappe. It has been rated as problematic. Affected by this issue is some unknown functionality of the file frappe/templates/includes/navbar/navbar_search.html of the component Search. The manipulation of the argument q leads to cross site scripting. The attack may be launched remotely. The name of the patch is bfab7191543961c6cb77fe267063877c31b616ce. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213560.

• CWE-707
• CWE-79

• https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616cePatch, Third Party Advisory
• https://github.com/frappe/frappe/pull/18847Patch, Third Party Advisory
• https://vuldb.com/?id.213560Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/frappe/frappe/commit/bfab7191543961c6cb77fe267063877c31b616cePatch, Third Party Advisory
• https://github.com/frappe/frappe/pull/18847Patch, Third Party Advisory
• https://vuldb.com/?id.213560Permissions Required, Third Party Advisory, VDB Entry

Published

Nov 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39874Sensitive log information leakage vulnerability in Samsung A…5.5
• CVE-2022-39875Improper component protection vulnerability in Samsung Accou…4.4
• CVE-2022-39876Insertion of Sensitive Information into Log in PushRegIdUpda…3.3
• CVE-2022-39877Improper access control vulnerability in ProfileSharingAccou…5.3
• CVE-2022-39878Improper access control vulnerability in Samsung Checkout pr…5.5
• CVE-2022-39879Improper authorization vulnerability in?CallBGProvider prior…3.3
• CVE-2022-39880Improper input validation vulnerability in DualOutFocusViewe…7.8
• CVE-2022-39881Improper input validation vulnerability for processing SIB12…9.1
• CVE-2022-39882Heap overflow vulnerability in sflacf_fal_bytes_peek functio…7.8
• CVE-2022-39883Improper authorization vulnerability in StorageManagerServic…7.8
• CVE-2022-39884Improper access control vulnerability in IImsService prior t…3.3
• CVE-2022-39885Improper access control vulnerability in BootCompletedReceiv…3.3