CVE-2025-29192

FlowiseAI Flowise prior to 3.0.5 is vulnerable to Cross-Site Scripting (XSS) via FORM and INPUT elements in the chat log when viewed by an admin. The issue is consistently described across sources as a stored XSS variant introduced by insufficient sanitization of chat-log form fields. Affected so...

EUVD-2025-32481

Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...