CVE-2026-54395

CVE-2026-54395

MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inserted into an inline JavaScript handler using HTML escaping inside a single-quoted JavaScript string. Because browsers H…

Vulnerability class: XSS (Cross-Site Scripting)

Weakness classification (CWE)

References