← Database
CVE-2024-9148
CRITICAL
CVSS: 9.6
Published: 2024-09-25
Modified: 2026-06-17
Description
Flowise < 2.1.1 suffers from a Stored Cross-Site vulnerability due to a lack of input sanitization in Flowise Chat Embed < 2.0.0.
Affected Platforms
Flowiseai EmbedFlowiseai Flowise
Weakness Type
CWE-79, CWE-79