CVE-2018-8948: Misp-Project Misp

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

In MISP before 2.4.89, app/View/Events/resolved_attributes.ctp has multiple XSS issues via a malicious MISP module.

Affected products

• Misp-Project Misp: before 2.4.89 (fixed in 2.4.89)

Published 2018-03-23. Last modified 2026-06-17.