CVE-2026-81731: Frappe Doctype Ignore Xss Filtercve-2026-81731-frappe-doctype-ignore-xss-filter
The DocField configuration specifies 'ignore_xss_filter: 1', which bypasses Frappe's HTML sanitization routines and allows unsanitized user content to be stored and rendered, leading to stored Cross-Site Scripting (XSS).