CVE-2021-25324

MediumCVSS 6.1

Published: 19/01/2021(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

Summary

MISP version 2.4.136 has a Stored XSS vulnerability in the galaxy cluster view that can be exploited via a cluster name in app/View/GalaxyClusters/view.ctp.

Risk Assessment

Exploitation of this vulnerability may lead to the execution of malicious code in users' browsers, jeopardizing data security and system integrity.

Recommendation

It is recommended to update MISP to the latest version to mitigate this vulnerability and to monitor the application for unauthorized changes.

Original NVD description (English source)

MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp.