MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.

Published Jan 19, 2021 · Updated Aug 3, 2024 · Assigned by mitre