XSS in Misp

CVE-2026-54395

MISP contains a reflected cross-site scripting vulnerability in the UiBeta event index view. The urlparams value is inserted into an inline JavaScript handler using HTML escaping inside a single-quoted JavaScript string. Because browsers H…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (17.1th percentile) — read the EPSS interpretation.