Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log.
| Software | From | Fixed in |
|---|---|---|
flowise
|
- | 3.0.8 |
| flowiseai / flowise | - | 3.0.5 |