10500 matches found
EUVD-2025-32480
Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...
CVE-2025-50538
Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...
CVE-2025-29192
Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...
CVE-2025-50538
Flowise before version 3.0.5 is affected by an XSS vulnerability where an unfiltered IFRAME element allows an attacker to inject scripts when an admin views the chat log. Affected product: Flowise (FlowiseAI) prior to 3.0.5. Root cause: unfiltered IFRAME in the chat log view, enabling cross-site ...
CVE-2025-29192
FlowiseAI Flowise prior to 3.0.5 is vulnerable to Cross-Site Scripting (XSS) via FORM and INPUT elements in the chat log when viewed by an admin. The issue is consistently described across sources as a stored XSS variant introduced by insufficient sanitization of chat-log form fields. Affected so...
CVE-2025-29192: Improper Neutralization of Input During Web Page Generation
Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...
CVE-2025-29192
Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log...
BIT-DISCOURSE-2025-58054 Discourse is vulnerable to XSS when quoting chat messages
Discourse is an open-source community discussion platform. Versions 3.5.0 and below are vulnerable to XSS attacks through parsing and rendering of chat channel titles and chat thread titles via the quote message functionality when using the rich text editor. This issue is fixed in version 3.5.1...
Cross-site Scripting (XSS)
Overview flowise is a Flowiseai Server Affected versions of this package are vulnerable to Cross-site Scripting XSS via the chat logs, due to improper input sanitization. An attacker can access sensitive information or impersonate an administrator by injecting malicious HTML or scripts into chat...
EUVD-2025-30496
Malicious code in bioql PyPI...
EUVD-2025-15759
Malicious code in bioql PyPI...
EUVD-2024-34205
Malicious code in bioql PyPI...
EUVD-2025-20667
Malicious code in bioql PyPI...
EUVD-2025-7266
Malicious code in bioql PyPI...
EUVD-2024-32852
Malicious code in bioql PyPI...
EUVD-2021-31058
Malicious code in bioql PyPI...
EUVD-2022-52736
Malicious code in bioql PyPI...
EUVD-2024-44532
Malicious code in bioql PyPI...