简体中文

CVE-2025-71331：详情

CVE-2025-71331

6.1
/
中危
2026-06-20
16h17 +00:00
A03-Injection
Network
2026-10-19
17h10 +00:00
CVE.org
NVD
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g.,