2 matches found
CVE-2020-13153: Improper Neutralization of Input During Web Page Generation
app/View/Events/resolvedattributes.ctp in MISP before 2.4.126 has XSS in the resolved attributes view...
6.1CVSS6.3AI score0.00841EPSS
SaveExploits0References6
CVE-2018-8948: Improper Neutralization of Input During Web Page Generation
In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...
6.1CVSS6.3AI score0.00781EPSS
SaveExploits0References2
20