CVE-2025-67906: Improper Neutralization of Input During Web Page Generation

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path...