XSS in Misp Cti-transmute
CVE-2026-73156
Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters. Slice names may originate directly from STIX or MISP data, including STIX types, relationship_type…
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Misp Cti-transmute — versions 0