CVE-2025-50538

Published October 6th, 2025

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

N/A

Affected

1

PROJECT

Description

Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.

FlowiseAI/Flowise

Build AI Agents, Visually

GitHub

54K