Stored-XSS in ERPNext (Frappe) Email Template Engine

I. Description The Email Template engine is vulnerable to Cross-Site Scripting (XSS).An attacker with permission to create or edit email templates can inject malicious javascript code that are execute