---
id: 3983
title: "FlowscreenComponents Basepack, Version 3.0.7 Advisory"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/flowscreencomponents-advisory"
published_at: "2022-12-15T00:00:00Z"
tags: ["web-security", "xss", "vulnerability", "salesforce", "security-advisory", "flowscreencomponents"]
phying_url: "https://phying.com/item/3983"
lang: en
---

# FlowscreenComponents Basepack, Version 3.0.7 Advisory

## Summary

Advisory: a reflected XSS in Salesforce library FlowScreenComponents BasePack 3.0.7 lets attackers execute JavaScript in the Salesforce domain via crafted parameters, risking session takeover.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2022-12-15T00:00:00Z
- **Original:** https://bishopfox.com/blog/flowscreencomponents-advisory
- **Phying News:** https://phying.com/item/3983