← Database

CVE-2026-2098

MEDIUM CVSS: 6.1 Published: 2026-02-10 Modified: 2026-06-17

Description

AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks.

Affected Platforms

Flowring Agentflow

Weakness Type

CWE-79

References