2 matches found
CVE-2026-54393
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setSettingInternal, bypassing the normal setSetting validation logic, including validatehomepage, which requires homepage...
5.4CVSS5.8AI score0.00377EPSS
SaveExploits0References4
CVE-2026-54393: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability exists in MISP when the Overmind theme is used. The setHomePage endpoint previously saved the user-controlled path value through setSettingInternal, bypassing the normal setSetting validation logic, including validatehomepage, which requires homepage...
5.1CVSS5.8AI score0.00377EPSS
SaveExploits0References2
20