Vulnerability Details CVE-2025-71331
Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., <iframe src="javascript:alert(document.cookie)">) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim's browser, enabling theft of cookies and session data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 4.9%
CVSS Severity
CVSS v3 Score 6.1
References
Products affected by CVE-2025-71331
-
cpe:2.3:a:flowiseai:flowise:-
-
cpe:2.3:a:flowiseai:flowise:1.0.0
-
cpe:2.3:a:flowiseai:flowise:1.0.1
-
cpe:2.3:a:flowiseai:flowise:1.1.0
-
cpe:2.3:a:flowiseai:flowise:1.1.1
-
cpe:2.3:a:flowiseai:flowise:1.2.1
-
cpe:2.3:a:flowiseai:flowise:1.2.10
-
cpe:2.3:a:flowiseai:flowise:1.2.11
-
cpe:2.3:a:flowiseai:flowise:1.2.12
-
cpe:2.3:a:flowiseai:flowise:1.2.13
-
cpe:2.3:a:flowiseai:flowise:1.2.14
-
cpe:2.3:a:flowiseai:flowise:1.2.15
-
cpe:2.3:a:flowiseai:flowise:1.2.16
-
cpe:2.3:a:flowiseai:flowise:1.2.2
-
cpe:2.3:a:flowiseai:flowise:1.2.3
-
cpe:2.3:a:flowiseai:flowise:1.2.4
-
cpe:2.3:a:flowiseai:flowise:1.2.5
-
cpe:2.3:a:flowiseai:flowise:1.2.6
-
cpe:2.3:a:flowiseai:flowise:1.2.7
-
cpe:2.3:a:flowiseai:flowise:1.2.8
-
cpe:2.3:a:flowiseai:flowise:1.2.9
-
cpe:2.3:a:flowiseai:flowise:1.3.0
-
cpe:2.3:a:flowiseai:flowise:1.3.1
-
cpe:2.3:a:flowiseai:flowise:1.3.2
-
cpe:2.3:a:flowiseai:flowise:1.3.3
-
cpe:2.3:a:flowiseai:flowise:1.3.4
-
cpe:2.3:a:flowiseai:flowise:1.3.5
-
cpe:2.3:a:flowiseai:flowise:1.3.6
-
cpe:2.3:a:flowiseai:flowise:1.3.7
-
cpe:2.3:a:flowiseai:flowise:1.3.8
-
cpe:2.3:a:flowiseai:flowise:1.3.9
-
cpe:2.3:a:flowiseai:flowise:1.4.0
-
cpe:2.3:a:flowiseai:flowise:1.4.1
-
cpe:2.3:a:flowiseai:flowise:1.4.10
-
cpe:2.3:a:flowiseai:flowise:1.4.11
-
cpe:2.3:a:flowiseai:flowise:1.4.12
-
cpe:2.3:a:flowiseai:flowise:1.4.2
-
cpe:2.3:a:flowiseai:flowise:1.4.3
-
cpe:2.3:a:flowiseai:flowise:1.4.4
-
cpe:2.3:a:flowiseai:flowise:1.4.5
-
cpe:2.3:a:flowiseai:flowise:1.4.6
-
cpe:2.3:a:flowiseai:flowise:1.4.7
-
cpe:2.3:a:flowiseai:flowise:1.4.8
-
cpe:2.3:a:flowiseai:flowise:1.4.9
-
cpe:2.3:a:flowiseai:flowise:1.5.0
-
cpe:2.3:a:flowiseai:flowise:1.5.1
-
cpe:2.3:a:flowiseai:flowise:1.6.0
-
cpe:2.3:a:flowiseai:flowise:1.6.1
-
cpe:2.3:a:flowiseai:flowise:1.6.2
-
cpe:2.3:a:flowiseai:flowise:1.6.3
-
cpe:2.3:a:flowiseai:flowise:1.6.4
-
cpe:2.3:a:flowiseai:flowise:1.6.5
-
cpe:2.3:a:flowiseai:flowise:1.6.6
-
cpe:2.3:a:flowiseai:flowise:1.7.0
-
cpe:2.3:a:flowiseai:flowise:1.7.1
-
cpe:2.3:a:flowiseai:flowise:1.7.2
-
cpe:2.3:a:flowiseai:flowise:1.8.0
-
cpe:2.3:a:flowiseai:flowise:1.8.1
-
cpe:2.3:a:flowiseai:flowise:1.8.2
-
cpe:2.3:a:flowiseai:flowise:1.8.3
-
cpe:2.3:a:flowiseai:flowise:1.8.4
-
cpe:2.3:a:flowiseai:flowise:2.0.0
-
cpe:2.3:a:flowiseai:flowise:2.0.1
-
cpe:2.3:a:flowiseai:flowise:2.0.2
-
cpe:2.3:a:flowiseai:flowise:2.0.3
-
cpe:2.3:a:flowiseai:flowise:2.0.4
-
cpe:2.3:a:flowiseai:flowise:2.0.5
-
cpe:2.3:a:flowiseai:flowise:2.0.6
-
cpe:2.3:a:flowiseai:flowise:2.0.7
-
cpe:2.3:a:flowiseai:flowise:2.1.0
-
cpe:2.3:a:flowiseai:flowise:2.1.1
-
cpe:2.3:a:flowiseai:flowise:2.1.2
-
cpe:2.3:a:flowiseai:flowise:2.1.3
-
cpe:2.3:a:flowiseai:flowise:2.1.4
-
cpe:2.3:a:flowiseai:flowise:2.1.5
-
cpe:2.3:a:flowiseai:flowise:2.2.0
-
cpe:2.3:a:flowiseai:flowise:2.2.1
-
cpe:2.3:a:flowiseai:flowise:2.2.2
-
cpe:2.3:a:flowiseai:flowise:2.2.3
-
cpe:2.3:a:flowiseai:flowise:2.2.4
-
cpe:2.3:a:flowiseai:flowise:2.2.5
-
cpe:2.3:a:flowiseai:flowise:2.2.6
-
cpe:2.3:a:flowiseai:flowise:2.2.7
-
cpe:2.3:a:flowiseai:flowise:2.2.8
-
cpe:2.3:a:flowiseai:flowise:3.0.0
-
cpe:2.3:a:flowiseai:flowise:3.0.1
-
cpe:2.3:a:flowiseai:flowise:3.0.2
-
cpe:2.3:a:flowiseai:flowise:3.0.3
-
cpe:2.3:a:flowiseai:flowise:3.0.4
-
cpe:2.3:a:flowiseai:flowise:3.0.5
-
cpe:2.3:a:flowiseai:flowise:3.0.6
-
cpe:2.3:a:flowiseai:flowise:3.0.7