Flowise before 3.0.5 allows XSS via a FORM element and an INPUT element when an admin views the chat log.
| Software | From | Fixed in |
|---|---|---|
flowise
|
- | 3.0.5 |
| flowiseai / flowise | - | 3.0.5 |