CVE-2020-10246

MediumCVSS 6.1

Published: 09/03/2020(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.84%

53th percentile - higher than 53% of all known CVEs

MISP version 2.4.122 has a reflected XSS vulnerability via unsanitized URL parameters. This is related to app/View/Users/statistics_orgs.ctp.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability and to implement filtering and validation of URL parameters.

Original NVD description (English source)

MISP 2.4.122 has reflected XSS via unsanitized URL parameters. This is related to app/View/Users/statistics_orgs.ctp.