XSS in Misp Bsimvis

CVE-2026-53693

A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, H…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (19.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References