CVE-2019-10254

MediumCVSS 6.1

Published: 28/03/2019(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

54th percentile - higher than 54% of all known CVEs

In MISP before version 2.4.105, there is a Reflected XSS vulnerability in the default layout template app/View/Layouts/default.ctp.

An attacker can exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to version 2.4.105 or later to mitigate this vulnerability.

Original NVD description (English source)

In MISP before 2.4.105, the app/View/Layouts/default.ctp default layout template has a Reflected XSS vulnerability.