2 matches found
CVE-2026-95661
MISP contains a reflected cross-site scripting XSS vulnerability in the attribute histogram view. The $selectedTypes variable, which is derived from the URL path segment , was interpolated directly into a JavaScript array literal inside an onClick HTML attribute without any encoding or escaping. ...
5.1CVSS
SaveExploits0References1
EUVD-2026-84374
MISP contains a reflected cross-site scripting XSS vulnerability in the attribute histogram view. The $selectedTypes variable, which is derived from the URL path segment , was interpolated directly into a JavaScript array literal inside an onClick HTML attribute without any encoding or escaping. ...
5.1CVSS
SaveExploits0References1
20