Embed

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-9148 Sep 25, 01:15 npm MEDIUM POC PATCH This Month

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Flowise Embed Flowiseai

NVD

CVSS 3.1

6.1

EPSS

0.6%

CVE-2024-9148 npm

EPSS 1% CVSS 6.1

MEDIUM POC PATCH This Month

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Flowise Embed +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy