HIGH 8.2 npm
Duplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
GHSA-7rgr-72hp-9wp3
Published ยท Modified
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-964p-j4gg-mhwc. This link is maintained to preserve external references.
Original Description
Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.
Ready to move
Start Securing
Free, no credit card | First findings in minutes