Skip to main content

Embed

1 CVEs product

Monthly

CVE-2024-9148 npm MEDIUM POC PATCH This Month

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Embed Flowise
NVD
CVSS 3.1
6.1
EPSS
0.6%
EPSS 1% CVSS 6.1
MEDIUM POC PATCH This Month

Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Embed Flowise
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy