CVE-2025-71331— Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows
Possible ATT&CK Techniques 3AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-71331
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Flowise - Cross-Site Scripting in Chat Messages and Agent Workflows
Source: CVE Program / CVE List V5
Vulnerability Description
Flowise before 3.0.8 contains a cross-site scripting (XSS) vulnerability caused by insufficient input filtering in chat messages and custom agent functions. An attacker can inject malicious JavaScript by sending an iframe payload (e.g., <iframe src="javascript:alert(document.cookie)">) in a chat box, or by having a custom agent function return an XSS payload from an external website. The injected script executes in the victim's browser, enabling theft of cookies and session data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
FlowiseAI Flowise 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FlowiseAI Flowise是FlowiseAI公司开源的一个用于轻松构建 LLM 应用程序的工具。 FlowiseAI Flowise 3.0.8之前版本存在跨站脚本漏洞，该漏洞源于对聊天消息和自定义代理函数中的输入过滤不足，可能导致攻击者通过发送iframe有效载荷或让自定义代理函数从外部网站返回XSS有效载荷来注入恶意JavaScript脚本，从而窃取Cookie和会话数据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-71331
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-71331
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-71331 (2)
Same Patch Batch · Flowise · 2026-06-20 · 4 CVEs total
| CVE-2024-58351 | 9.8 CRITICAL | Flowise - Remote Code Execution via overrideConfig Parameter |
| CVE-2026-56276 | Flowise - Mass Assignment in PUT /api/v1/user Allows Password Hash Override | |
| CVE-2026-56267 | Flowise - PII Disclosure via Unauthenticated Forgot Password Endpoint |
IV. Related Vulnerabilities
Same product: Flowise
- CVE-2026-71962
Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assis - CVE-2026-67620
Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny- - CVE-2026-70636
Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Re - CVE-2026-67622
Flowise 3.1.4 IDOR in OpenAI Assistants Integration - CVE-2026-67621
Flowise 3.1.4 Missing Authorization on Document Store Mutati
Same vendor: Flowise
- CVE-2026-56271
Flowise - Weak Default JWT Secrets in Authentication Middlew - CVE-2026-56273
Flowise - Path Traversal in Vector Store basePath Parameter - CVE-2026-56278
Flowise - Session Hijacking via Weak Default Express Session - CVE-2026-56277
Flowise - Hardcoded CORS Wildcard in TTS Endpoint - CVE-2026-58057
Flowise - Custom MCP Environment Variable Denylist Bypass vi
Same weakness: CWE-80
- CVE-2026-73237
Apache Allura: XSS in markdown pipeline - CVE-2026-73238
Apache Allura: XSS in code display - CVE-2026-65841
Jodit has cross-site scripting (XSS) via <script> nested in - CVE-2026-34497
FMS Employee Vulnerable to HTML Injection - CVE-2026-48910
Apache JSPWiki: Markdown parser allows XSS injection in Mark
V. Comments for CVE-2025-71331
No comments yet