CVE-2017-13671

—

CVSS 3.0

6.1 medium

EPSS

<1%p60

Published

Aug 24, 2017 (Aug 24, 2017)

Modified

Jun 22, 2026

Description

app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.

Vendors: misp-project
Products: misp
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.