← Database

CVE-2026-2099

MEDIUM CVSS: 5.4 Published: 2026-02-10 Modified: 2026-06-17

Description

AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.

Affected Platforms

Flowring Agentflow

Weakness Type

CWE-79

References