Описание
AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.0.0.1878.877 (исключая)
cpe:2.3:a:flowring:agentflow:*:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00165
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
6 месяцев назад
AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.
EPSS
Процентиль: 6%
0.00165
Низкий
5.4 Medium
CVSS3
Дефекты
CWE-79