| Package | Affected versions | Patched versions |
|---|---|---|
| misp | ≤ 2.4.78 |
app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free