Is CVE-2024-58391 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-58391 being exploited in the wild.

How severe is CVE-2024-58391?

Medium severity, with a CVSS score of 4.3, published 12 October 2026.

Which products and versions are affected?

Frappe before 14.58.0 and 15.x before 15.4.0.

Is there a fix for CVE-2024-58391?

Yes: fixed in Frappe 14.58.0, 15.4.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2024-58391 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2024-58391?

Check whether you run Frappe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-58391: Frappe cross-site scripting in printview

CVE-2024-58391 · Severity: medium · CVSS 4.3 · Published 2026-10-12

Frappe is a web-based framework used to build enterprise applications and manage business data. A cross-site scripting flaw in the printview feature allows attackers to craft a malicious URL that, when clicked by a user, executes malicious JavaScript in their browser and potentially steals sensitive session data or performs actions on their behalf.

Technologies: Frappe. Vendors: Frappe.

Quick answers

Is CVE-2024-58391 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-58391 being exploited in the wild.
How severe is CVE-2024-58391?: Medium severity, with a CVSS score of 4.3, published 12 October 2026.
Which products and versions are affected?: Frappe before 14.58.0 and 15.x before 15.4.0.
Is there a fix for CVE-2024-58391?: Yes: fixed in Frappe 14.58.0, 15.4.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2024-58391 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2024-58391?: Check whether you run Frappe at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: Frappe 14.58.0, 15.4.0

Technical details

The printview functionality fails to escape user-supplied parameters before rendering them in HTML, enabling stored or reflected cross-site scripting (XSS). An unauthenticated attacker can craft a malicious printview URL containing JavaScript payloads that execute in a victim's browser with the victim's session privileges. User interaction is required (clicking a malicious link).

Affected products

Frappe Frappe before 14.58.0 and 15.x before 15.4.0

Timeline

2024-02-06: disclosed
2024-10-12: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.