CVE-2020-28947

MediumCVSS 6.1

Published: 19/11/2020(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

In MISP version 2.4.134, there is an XSS vulnerability in the template element index view due to mishandling of the id parameter.

An attacker could exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability and to review and validate input parameters.

Original NVD description (English source)

In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.