{"id":"EUVD-2025-210289","enisaUuid":"ed3a0291-c6ec-32c7-ba25-3bd508eb583f","description":"Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., \u003ciframe src\u003d\"javascript:alert(document.cookie)\"\u003e) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim\u0027s browser, enabling theft of cookies and session data.","datePublished":"Jun 20, 2026, 3:24:39 PM","dateUpdated":"Jun 22, 2026, 1:51:35 PM","baseScore":5.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wv\nhttps://www.vulncheck.com/advisories/flowise-cross-site-scripting-in-chat-messages-and-agent-workflows\n","aliases":"CVE-2025-71331\nGHSA-jv86-v5fr-xvg6\n","assigner":"VulnCheck","epss":0.33,"enisaIdProduct":[{"id":"7ce41f36-bc5e-3e5f-8ad5-7b2679581d22","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.8"}],"enisaIdVendor":[{"id":"e1365a7b-cfd0-3542-b481-0f59a4531ce5","vendor":{"name":"Flowise"}}],"enisaIdVulnerability":[{"id":"b16aa7c4-e72d-35c3-bd16-e135723330cb","vulnerability":{"id":"CVE-2025-71331","description":"Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., \u003ciframe src\u003d\"javascript:alert(document.cookie)\"\u003e) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim\u0027s browser, enabling theft of cookies and session data.","datePublished":"Jun 20, 2026, 3:24:39 PM","dateUpdated":"Jun 22, 2026, 1:51:35 PM","status":"PUBLISHED","baseScore":5.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wv\nhttps://www.vulncheck.com/advisories/flowise-cross-site-scripting-in-chat-messages-and-agent-workflows\n","enisa_id":"EUVD-2025-210289\n","assigner":"VulnCheck","epss":0.33,"dataProcessed":"Nov 2, 2026, 7:19:58 AM","vulnerabilityProduct":[{"id":"450c2d30-c175-3173-8e80-43e3b0888602","product":{"name":"Flowise","vendor":{"name":"FlowiseAI"}},"product_version":"0 \u003c3.0.8"}],"vulnerabilityVendor":[{"id":"bbd0cf0f-c243-39fc-b5a3-4375ee1f4d33","vendor":{"name":"Flowise"}}]}},{"id":"cf344671-c913-34c7-97b7-09756dd34ae1","vulnerability":{"id":"GHSA-jv86-v5fr-xvg6","description":"Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., \u003ciframe src\u003d\"javascript:alert(document.cookie)\"\u003e) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim\u0027s browser, enabling theft of cookies and session data.","datePublished":"Jun 20, 2026, 6:31:28 PM","dateUpdated":"Jun 20, 2026, 6:31:28 PM","baseScore":0.0,"references":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wv\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71331\nhttps://www.vulncheck.com/advisories/flowise-cross-site-scripting-in-chat-messages-and-agent-workflows\n","enisa_id":"EUVD-2025-210289\n","aliases":"CVE-2025-71331\nGHSA-jv86-v5fr-xvg6\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:01:46 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}