medium5.4
CVE-2026-2099
AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes …
Impact
AgentFlow developed by Flowring has a Stored Cross-Site Scripting vulnerability, allowing authenticated remote attackers to inject persistent JavaScript codes that are executed in users' browsers upon page load.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Flowring | Agentflow | before 4.0.0.1878.877 |