CVE-2023-40224

MediumCVSS 6.1

Published: 10/08/2023(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

29th percentile - higher than 29% of all known CVEs

MISP version 2.4.174 allows XSS in app/View/Events/index.ctp.

Exploitation of this vulnerability may lead to user data theft and session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability.

Original NVD description (English source)

MISP 2.4.174 allows XSS in app/View/Events/index.ctp.