XSS in Misp Cti-transmute
CVE-2026-73158
Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can contain style properties that are later consumed by Pivotick, and Pivotick interprets svgIcon as HTML. Because saved config…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Misp Cti-transmute — versions 0