2026-06-21 · 2 min · BitNinja Team

CVE-2025-71331: Cross-Site Scripting Vulnerability in Flowise

The recent discovery of CVE-2025-71331 highlights a serious cross-site scripting (XSS) vulnerability in Flowise versions prior to 3.0.8. This flaw arises from inadequate input filtering in chat messages and custom agent functions. Attackers can exploit this vulnerability by in...