CVE-2026-2098 – Flowring｜AgentFlow – Reflected Cross-site Scripting

CVE ID : CVE-2026-2098

Published : Feb. 10, 2026, 7:16 a.m. | 1 hour, 5 minutes ago

Description : AgentFlow developed by Flowring has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user’s browser through phishing attacks.

Severity: 6.1 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…