CVE-2026-112184

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.5.48

Description A reflected cross-site scripting (XSS) issue exists in the workflow module interface. The application renders parameter names returned by the misp-modules service as raw HTML form labels without output encoding. An attacker capable of influencing these parameter names can inject arbitrary HTML or JavaScript. This script executes within the browser session of an authenticated user, potentially leading to session token theft, interface manipulation, or unauthorized actions.

Recommendations Update to version 2.5.48 or later.