Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., <iframe src="javascript:alert(document.cookie)">) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim's browser, enabling theft of cookies and session data.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71331 Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attack… https://www.cve.org/CVERecord?id=CVE-2025-71331
Post summary
A new XSS vulnerability (CVE‑2025‑71331) was disclosed in Flowise versions before 3.0.8, caused by poor input filtering in chat messages and custom agent functions.
🚨*CVE* CVE-2025-71331 Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attack… https://www.cve.org/CVERecord?id=CVE-2025-71331 ----- Traducción: CVE-2025-71331 Flo… http://infoflow.cloud`
Post summary
The tweet announces CVE-2025-71331, an XSS flaw in Flowise versions prior to 3.0.8, providing basic technical details but no PoC, exploit code, or patch information.
CVE-2025-71331 Cross-Site Scripting Vulnerability in Flowise Before 3.0.8 via Chat Messages https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71331
Post summary
The text announces a new XSS vulnerability in Flowise (pre‑3.0.8) with brief technical details but no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | flowiseai | flowise | - | - | - |