{"id":"CVE-2025-71331","title":"Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows","summary":"Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., …","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvssSource":"cna","cwe":["CWE-80"],"vendor":"Flowise","product":"Flowise","affected":["Flowise < 3.0.8"],"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-06-22T13:50:59.326536Z"},"exploitAvailable":true,"published":"2026-06-20","updated":"2026-11-08","sourceUpdated":"2026-11-08T14:00:28.219Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-71331","references":[{"url":"https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-4fr9-3x69-36wv","label":"GitHub Security Advisory (GHSA-4fr9-3x69-36wv)"},{"url":"https://www.vulncheck.com/advisories/flowise-cross-site-scripting-in-chat-messages-and-agent-workflows","label":"VulnCheck Advisory: Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows"}],"tags":["cve.org","exploit-available"],"epss":0.00325,"epssPercentile":0.25737,"ingestedAt":"2026-11-08T14:51:22.484Z","slug":"CVE-2025-71331","body":"## Overview\n\nFlowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., <iframe src=\"javascript:alert(document.cookie)\">) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim's browser, enabling theft of cookies and session data.\n\n## Affected\n\n- `Flowise < 3.0.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":33.6,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[]}