PT-2024-26990 · Flowise · Flowise

Name of the Vulnerable Software and Affected Versions: Flowise version 1.4.3 Description: A reflected cross-site scripting issue occurs in the "api/v1/chatflows/id" endpoint of Flowise. This allows an attacker to craft a specially crafted URL that injects Javascript into user sessions, potentiall...