medium6.1
CVE-2026-52475
Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file
Impact
Cross Site Scripting vulnerability in aiflowy <= 2.1.2 allows a remote attacker to obtain sensitive information via the UploadController.java file
Affected products
| Product | Affected versions |
|---|---|
| Aiflowy | through 2.1.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.