CVE-2026-44205 — Frappe is a full-stack web application framework. Prior to version 15.106.0, a stored XSS vulnerability in the user profile image section allows an attacker to execute malicious scripts in the browser — CVE Database · The Intelligence Room